Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,352
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,004 recordsRanked by popularity · browse by tag · record statistics
crates.io
19Criticalhealth index
seanmonstar/reqwest
An easy and powerful Rust HTTP Client
Rust★ 11.8K↓ 60.6M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
Nozbe/WatermelonDB
🍉 Reactive & asynchronous database for powerful React and React Native apps ⚡️
JavaScript · Objective-C★ 11.8K↓ 226.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
38Weakhealth index
tachyons-css/tachyons
Functional css for humans
CSS★ 11.7K↓ 352K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
code4craft/webmagic
A scalable web crawler framework for Java.
Java · HTML★ 11.7KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
egulias/EmailValidator
PHP Email address validator
PHP★ 11.6K↓ 16.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
ssssssss-team/spider-flow
新一代爬虫平台,以图形化方式定义爬虫流程,不写代码即可完成爬虫。
Java★ 11.4KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
JavaScript · Stylus · CSS★ 11.3K↓ 11M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
60Moderatehealth index
FormidableLabs/victory
A collection of composable React components for building interactive data visualizations
TypeScript · MDX · JavaScript★ 11.2K↓ 17M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 22.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
JavaScript★ 11.2KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
54Moderatehealth index
gregberge/svgr
Transform SVGs into React components 🦁
TypeScript · MDX · JavaScript★ 11.1K↓ 282M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
FerretDB/FerretDB
A truly Open Source MongoDB alternative
Go★ 11.1KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
siderolabs/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
Go★ 11KAug 28, 2026
MPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
kkroening/ffmpeg-python
Python bindings for FFmpeg - with complex filtering support
Python★ 11K↓ 9.6M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
jfeinstein10/SlidingMenu
An Android library that allows you to easily create applications with slide-in menus. You may use it in your Android apps provided that you cite this project and include the license in your app. Thanks!
Java★ 11KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
NuGet
32At Riskhealth index
StockSharp/StockSharp
Algorithmic trading and quantitative trading open source platform to develop trading robots (stock markets, forex, crypto, bitcoins, and options).
C#★ 10.9KOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
fdehau/tui-rs
Build terminal user interfaces and dashboards using Rust
Rust★ 10.9K↓ 114.9K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.9KSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
square/javapoet
A Java API for generating .java source files.
Java★ 10.8KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.8K↓ 318M/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven
51Moderatehealth index
TooTallNate/Java-WebSocket
A barebones WebSocket client and server implementation written in 100% Java.
Java · HTML★ 10.8KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
facebookresearch/ParlAI
A framework for training and evaluating AI models on a variety of openly available dialogue datasets.
Python★ 10.6KOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reactstrap/reactstrap
Simple React Bootstrap 5 components
JavaScript · TypeScript★ 10.5K↓ 2.5M/moOct 17, 2026
MITOct 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
unovue/shadcn-vue
Vue port of shadcn-ui
TypeScript · Vue★ 10.5K↓ 847.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-bakery/nom
Rust parser combinator framework
Rust★ 10.5K↓ 52.2M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
34At Riskhealth index
sourcegraph/conc
Better structured concurrency for go
Go★ 10.4KAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Python★ 10.4K↓ 1.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
29At Riskhealth index
noisetorch/NoiseTorch
Real-time microphone noise suppression on Linux.
Go · C★ 10.3KAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
—
34At Riskhealth index
wwmm/easyeffects
Limiter, compressor, convolver, equalizer and auto volume and many other plugins for PipeWire applications
HTML · C++ · QML★ 10.2KSep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reactjs/react-transition-group
An easy way to perform animations when a React component enters or leaves the DOM
JavaScript★ 10.2K↓ 197M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0