Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,090
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,985 recordsRanked by popularity · browse by tag · record statistics
npm
48Weakhealth index
emilkowalski/vaul
A drawer component for React.
TypeScript★ 8,615↓ 136M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · Maven
30At Riskhealth index
DylanVann/react-native-fast-image
🚩 FastImage, performant React Native image component.
TypeScript · Java · Objective-C★ 8,420↓ 558.5K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
XPixelGroup/BasicSR
Open Source Image and Video Restoration Toolbox for Super-resolution, Denoise, Deblurring, etc. Currently, it includes EDSR, RCAN, SRResNet, SRGAN, ESRGAN, EDVR, BasicVSR, SwinIR, ECBSR, etc. Also support StyleGAN2, DFDNet.
Python★ 8,381Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
open-pencil/open-pencil
AI-native design editor. Open-source Figma alternative.
TypeScript★ 8,326↓ 73.6K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
remix-run/history
Manage session history with JavaScript
JavaScript · TypeScript★ 8,299↓ 44.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
zilliztech/GPTCache
Semantic cache for LLMs. Fully integrated with LangChain and llama_index.
Python★ 8,192Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
soldair/node-qrcode
qr code generator
JavaScript★ 8,174↓ 85.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
MagicStack/asyncpg
A fast PostgreSQL Database Client Library for Python/asyncio.
Python · Cython★ 8,088Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
docopt/docopt
Create *beautiful* command-line interfaces with Python
Python★ 8,005Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
enquirer/enquirer
Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert
JavaScript · SCSS★ 7,947↓ 130M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
juliencrn/usehooks-ts
React hook library, ready to use, written in Typescript.
TypeScript★ 7,857↓ 19.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
styled-components/polished
A lightweight toolset for writing styles in JavaScript ✨
JavaScript★ 7,662↓ 40.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
aws/aws-sdk-js
AWS SDK for JavaScript v2 (End-of-Life as of 09/08/2025). The AWS SDK for JavaScript v3 in the browser and Node.js is available here: https://github.com/aws/aws-sdk-js-v3
JavaScript · Ruby★ 7,603↓ 34.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
twitchtv/twirp
A simple RPC framework with protobuf service definitions
Go★ 7,530Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
57Moderatehealth index
jerryscript-project/jerryscript
Ultra-lightweight JavaScript engine for the Internet of Things.
C · JavaScript★ 7,419Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
The-Vibe-Company/megaparse
File Parser optimised for LLM Ingestion with no loss 🧠 Parse PDFs, Docx, PPTx in a format that is ideal for LLMs.
Python★ 7,412Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
28At Riskhealth index
jakearchibald/idb
IndexedDB, but with promises
TypeScript★ 7,411↓ 92.7M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
59Moderatehealth index
reactjs/react-modal
Accessible modal dialog component for React
JavaScript★ 7,406↓ 11M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
typestack/class-transformer
Decorator-based transformation, serialization, and deserialization between objects and classes.
TypeScript★ 7,341↓ 47.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
PAIR-code/facets
Visualizations for machine learning datasets
Jupyter Notebook · HTML★ 7,332Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
unjs/consola
🐨 Elegant Console Logger for Node.js and Browser
TypeScript★ 7,326↓ 210M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
15Criticalhealth index
stefanpenner/es6-promise
A polyfill for ES6-style Promises
JavaScript★ 7,249↓ 71.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
bubkoo/html-to-image
✂️ Generates an image from a DOM node using HTML5 canvas and SVG.
TypeScript★ 7,237↓ 22.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
kennethreitz/records
SQL for Humans™
Python★ 7,219↓ 223.3K/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
trentm/node-bunyan
a simple and fast JSON logging module for node.js services
JavaScript · Perl★ 7,208↓ 14.3M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
json5/json5
JSON5 — JSON for Humans
JavaScript★ 7,162↓ 868M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
millsp/ts-toolbelt
👷 TypeScript's largest type utility library
TypeScript★ 7,150↓ 37.4M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
sindresorhus/screenfull
Simple wrapper for cross-browser usage of the JavaScript Fullscreen API
HTML · JavaScript · TypeScript★ 7,139↓ 19.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
jquery/esprima
ECMAScript parsing infrastructure for multipurpose analysis
TypeScript · JavaScript★ 7,138↓ 395M/moSep 16, 2026
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
Python · JavaScript★ 7,136Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0