Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,339
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,003 recordsRanked by popularity · browse by tag · record statistics
npm
25At Riskhealth index
rough-stuff/rough
Create graphics with a hand-drawn, sketchy, appearance
HTML · TypeScript★ 21.2KSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
cube-js/cube
📊 Cube Core is open-source semantic layer for AI, BI and embedded analytics
Rust · TypeScript · MDX★ 20.9K↓ 1.3M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
apache/mxnet
Lightweight, Portable, Flexible Distributed/Mobile Deep Learning with Dynamic, Mutation-aware Dataflow Dep Scheduler; for Python, R, Julia, Scala, Go, Javascript and more
C++ · Python★ 20.8KSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm · RubyGems
32At Riskhealth index
petkaantonov/bluebird
:bird: :zap: Bluebird is a full featured promise library with unmatched performance.
JavaScript★ 20.5K↓ 203M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven · npm
53Moderatehealth index
linlinjava/litemall
又一个小商城。litemall = Spring Boot后端 + Vue管理员前端 + 微信小程序用户前端 + Vue用户移动端
Java · JavaScript★ 20.4KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
15Criticalhealth index
yudaocode/SpringBoot-Labs
一个涵盖六个专栏:Spring Boot 2.X、Spring Cloud、Spring Cloud Alibaba、Dubbo、分布式消息队列、分布式事务的仓库。希望胖友小手一抖,右上角来个 Star,感恩 1024
Java★ 20.1KSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
—
34At Riskhealth index
RPCS3/rpcs3
PlayStation 3 emulator and debugger
C++★ 19.9KSep 24, 2026
GPL-2.0Sep 24, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
lss233/kirara-ai
🤖 可 DIY 的 多模态 AI 聊天机器人 | 🚀 快速接入 微信、 QQ、Telegram、等聊天平台 | 🦈支持DeepSeek、Grok、Claude、Ollama、Gemini、OpenAI | 工作流系统、网页搜索、AI画图、人设调教、虚拟女仆、语音对话 |
Python★ 19KSep 19, 2026
AGPL-3.0Sep 19, 2026 · metrics 2.10.0
Maven
60Moderatehealth index
antlr/antlr4
ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
Java · C++ · C#★ 19KSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
dianping/cat
CAT 作为服务端项目基础组件,提供了 Java, C/C++, Node.js, Python, Go 等多语言客户端,已经在美团点评的基础架构中间件框架(MVC框架,RPC框架,数据库框架,缓存框架等,消息队列,配置系统等)深度集成,为美团点评各业务线提供系统丰富的性能指标、健康状况、实时告警等。
Java★ 18.9KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
lightgbm-org/LightGBM
A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
C++ · Python · R★ 18.8K↓ 19.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
framework7io/framework7
Full featured HTML framework for building iOS & Android apps
JavaScript · Vue · Svelte★ 18.8KSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
27At Riskhealth index
jmoiron/sqlx
general purpose extensions to golang's database/sql
Go★ 17.7KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
14Criticalhealth index
npm/npm
This repository is moving to: https://github.com/npm/cli
Mixed★ 17.6KSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
justauth/JustAuth
🏆Gitee 最有价值开源项目 🚀:100: 小而全而美的第三方登录开源组件。目前已支持Github、Gitee、微博、钉钉、百度、Coding、腾讯云开发者平台、OSChina、支付宝、QQ、微信、淘宝、Google、Facebook、抖音、领英、小米、微软、今日头条、Teambition、StackOverflow、Pinterest、人人、华为、企业微信、酷家乐、Gitlab、美团、饿了么、推特、飞书、京东、阿里云、喜马拉雅、Amazon、Slack和 Line 等第三方平台的授权登录。 Login, so easy!
Java★ 17.5KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
15Criticalhealth index
dotnet/corefx
This repo is used for servicing PR's for .NET Core 2.1 and 3.1. Please visit us at https://github.com/dotnet/runtime
Mixed★ 17.5KSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Go
27At Riskhealth index
emirpasic/gods
GoDS (Go Data Structures) - Sets, Lists, Stacks, Maps, Trees, Queues, and much more
Go★ 17.5KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
nfl/react-helmet
A document head manager for React
JavaScript★ 17.5K↓ 13M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
lottie-react-native/lottie-react-native
Lottie wrapper for React Native.
TypeScript · Kotlin · Swift★ 17.2K↓ 5.1M/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
25At Riskhealth index
julienschmidt/httprouter
A high performance HTTP request router that scales well
Go★ 17.1KSep 15, 2026
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
QwenLM/Qwen-Agent
Agent framework and applications built upon Qwen>=3.0, featuring Function Calling, MCP, Code Interpreter, RAG, Chrome extension, etc.
Python★ 17.1K↓ 175.6K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
less/less.js
Less. The dynamic stylesheet language.
JavaScript · Less★ 17K↓ 40.8M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
BoostIO/BoostNote-Legacy
This repository is outdated and new Boost Note app is available! We've launched a new Boost Note app which supports real-time collaborative writing. https://github.com/BoostIO/BoostNote-App
JavaScript · Stylus★ 16.9KOct 8, 2026
Custom licenseOct 8, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
cvat-ai/cvat
Computer Vision Annotation Tool (CVAT) is a leading platform for building high-quality visual datasets for vision AI. It offers open-source, cloud, and enterprise products, as well as labeling services, for image, video, and 3D annotation with AI-assisted labeling, quality assurance, team collaboration, analytics, and developer APIs.
Python · TypeScript · JavaScript★ 16.7K↓ 86K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
janl/mustache.js
Minimal templating with {{mustaches}} in JavaScript
JavaScript★ 16.7K↓ 66.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
clap-rs/clap
A full featured, fast Command Line Argument Parser for Rust
Rust★ 16.7K↓ 280M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
shuzheng/zheng
基于Spring+SpringMVC+Mybatis分布式敏捷开发系统架构,提供整套公共微服务服务模块:集中权限管理(单点登录)、内容管理、支付中心、用户管理(支持第三方登录)、微信平台、存储系统、配置中心、日志分析、任务和通知等,支持服务治理、监控和追踪,努力为中小型企业打造全方位J2EE企业级开发解决方案。
Java · CSS★ 16.6KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
JeffLi1993/springboot-learning-example
spring boot 实践学习案例,是 spring boot 初学者及核心技术巩固的最佳实践。
Java · HTML★ 16.6KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aio-libs/aiohttp
Asynchronous HTTP client/server framework for asyncio and Python
Python★ 16.5K↓ 493M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
piskvorky/gensim
Topic Modelling for Humans
Python★ 16.5KSep 16, 2026
LGPL-2.1Sep 16, 2026 · metrics 2.10.0