Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,612
Monthly downloads under inspection
558B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,508 recordsRanked by popularity · browse by tag · record statistics
npm
14Criticalhealth index
maakbaas/esp8266-iot-framework
Framework for IoT projects implementing HTTPS requests, a React web interface, WiFi manager, live dashboard, configuration manager, file manager and OTA updates.
C++★ 431Jul 22, 2026
GPL-3.0Jul 22, 2026 · metrics 2.10.0
22At Riskhealth index
pmezard/go-difflib
Partial port of Python difflib package to Go
Go★ 431Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
npm
26At Riskhealth index
wuba/Taro-Mortgage-Calculator
首个 Taro 3 多端统一实例 - 支持 React Native,Weapp,H5。
TypeScript · SCSS★ 431Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-httpclient
Yii 2 HTTP client
PHP★ 430↓ 191K/moAug 1, 2026
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
npm
17Criticalhealth index
tj/node-delegates
Nodejs method and accessor delegation utility
JavaScript★ 429Aug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
PyPI · crates.io
16Criticalhealth index
awolverp/cachebox
The fastest memoizing and caching Python library written in Rust.
Rust · Python★ 428↓ 14.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
36Weakhealth index
Rich-Harris/estree-walker
Traverse an ESTree-compliant AST
JavaScript★ 426↓ 620M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
29At Riskhealth index
d3/d3-color
Color spaces! RGB, HSL, Cubehelix, CIELAB, and more.
JavaScript★ 426↓ 322M/moAug 31, 2026
ISCAug 31, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
justinsalamon/scaper
A library for soundscape synthesis and augmentation
Python★ 426Aug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
24At Riskhealth index
mgutz/ansi
Small, fast library to create ANSI colored strings and codes. [go, golang]
Go★ 426Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
34At Riskhealth index
Baystation12/Baystation12
Baystation's flavor of Space Station 13
DM★ 425Jul 21, 2026
AGPL-3.0Jul 21, 2026 · metrics 2.10.0
RubyGems
48Weakhealth index
WinRb/WinRM
Ruby library for Windows Remote Management
Ruby · HTML★ 425Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
mimemagicrb/mimemagic
Mime type detection in ruby via file extension or file content
Ruby★ 425Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-elasticsearch
Yii 2 Elasticsearch extension
PHP★ 425↓ 28.8K/moJul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
23At Riskhealth index
leahneukirchen/bacon
a small RSpec clone
Ruby★ 424Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
18Criticalhealth index
yaourdt/mgos-to-tasmota
A minimal firmware for OTA (over the air) flashing Tasmota, HAA, or ESPurna from Mongoose OS or compatible firmware types.
Python · C★ 424Aug 1, 2026
GPL-3.0Aug 1, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
PHP★ 423↓ 37.8K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Go
26At Riskhealth index
go-playground/universal-translator
:speech_balloon: i18n Translator for Go/Golang using CLDR data + pluralization rules
Go★ 423Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pycontribs/ansi2html
Convert text with ansi color codes to HTML
Python · HTML★ 423↓ 2.1M/moAug 19, 2026
LGPL-3.0Aug 19, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
whatshap/whatshap
Read-based phasing of genomic variants, also called haplotype assembly
Python · C++★ 423Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
tilezen/joerd
Joerd can be used to download, merge and generate tiles from digital elevation data
Python · QML★ 421Sep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
jarmo/require_all
A wonderfully simple way to load Ruby code
Ruby★ 420Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
HugoBlox/academic-file-converter
📚 Import Bibtex publications and Jupyter Notebook blog posts into your Markdown website or book. 将Bibtex转换为Markdown网站
Python · Jupyter Notebook★ 419Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
asweigart/PyGetWindow
A simple, cross-platform module for obtaining GUI information on applications' windows.
Python★ 419↓ 2.4M/moAug 24, 2026
BSD-3-ClauseAug 24, 2026 · metrics 2.10.0
Go
32At Riskhealth index
dsnet/compress
Collection of compression related Go packages.
Go★ 419Aug 29, 2026
BSD-3-ClauseAug 29, 2026 · metrics 2.10.0
Go
20At Riskhealth index
tidwall/pretty
Efficient JSON beautifier and compactor for Go
Go★ 419Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm · Go
15Criticalhealth index
vshulcz/deja-vu
Your agents already solved this. deja finds it — retroactive search and MCP recall over the session logs your coding agents already wrote. Cross-agent, SSH-portable, one zero-dep binary, fully local.
Go★ 419↓ 3,030/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/w3lib
Python library of web-related functions
Python★ 418↓ 8.6M/moAug 19, 2026
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
npm
21At Riskhealth index
TooTallNate/node-bindings
Helper module for loading your native module's `.node` file
JavaScript★ 416↓ 110M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0