Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,523
Monthly downloads under inspection
581B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,612 recordsRanked by popularity · browse by tag · record statistics
npm
29At Riskhealth index
d3/d3-chord
Visualizations relationships or network flow with a circular layout.
JavaScript★ 127↓ 65.9M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
hallazzang/asyncio-throttle
Simple, easy-to-use throttler for asyncio.
Python★ 127↓ 811.1K/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
NordicSemiconductor/pc-ble-driver-py
Python bindings for the ble-driver library
Python★ 126↓ 19.3K/moAug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
RedHatProductSecurity/cvss
CVSS2/3/4 library with interactive calculator for Python 2 and Python 3
Python★ 126↓ 2.8M/moAug 27, 2026
LGPL-3.0Aug 27, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
aldanor/qoi-rust
VERY fast encoder/decoder for QOI image format in pure and safe Rust
Rust★ 126↓ 4.9M/moAug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
colorjs/color-name
A JSON with CSS color names
JavaScript★ 126↓ 1.4B/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
datenlord/s3-server
Generic S3 server implementation
Rust★ 126↓ 21/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
sendgrid/python-http-client
Twilio SendGrid's Python HTTP Client for calling APIs
Python★ 126↓ 27.6M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
webflo/drupal-finder
No repository description published.
PHP★ 126↓ 884K/moAug 4, 2026
GPL-2.0Aug 4, 2026 · metrics 2.10.0
npm
18Criticalhealth index
AckerApple/angular-file
Angular components for user file select, drop, and more
JavaScript★ 125↓ 45.8K/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
19Criticalhealth index
googleapis/python-texttospeech
This library has moved to https://github.com/googleapis/google-cloud-python/tree/main/packages/google-cloud-texttospeech
Mixed★ 125Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 2.10.0
npm
19Criticalhealth index
janosh/svelte-toc
Sticky responsive table of contents component
TypeScript · Svelte★ 125↓ 3,227/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
48Weakhealth index
pkgjs/parseargs
Polyfill of `util.parseArgs()`
JavaScript★ 125↓ 368M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
romis2012/python-socks
Core proxy client (SOCKS4, SOCKS5, HTTP) functionality for Python
Python★ 125Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
31At Riskhealth index
PeculiarVentures/pkcs11js
A Node.js implementation of the PKCS#11 2.40 interface
C++ · C · JavaScript★ 123↓ 173.3K/moAug 30, 2026
MITAug 30, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
ahoward/systemu
univeral capture of stdout and stderr and handling of child process pid for windows, *nix, etc.
Ruby★ 123Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/cli
Lets make documentation on YFM
TypeScript★ 123↓ 25.5K/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
Hex
34At Riskhealth index
elixir-waffle/waffle_ecto
Waffle.Ecto provides an integration with Waffle and Ecto
Elixir★ 123↓ 42.9K/moAug 17, 2026
No licenseAug 17, 2026 · metrics 2.10.0
npm
23At Riskhealth index
estools/esutils
utility box for ECMAScript language tools
CoffeeScript · JavaScript★ 123↓ 573M/moAug 4, 2026
BSD-2-ClauseAug 4, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
kyrus/python-junit-xml
A Python module for creating JUnit XML test result documents that can be read by tools such as Jenkins. If you are ever working with test tool or test suite written in Python and want to take advantage of Jenkins' pretty graphs and test reporting capabilities, this module will let you generate the XML test reports.
Python★ 123↓ 12.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
JDongian/python-jamo
Hangul syllable decomposition and synthesis using jamo.
Python · Makefile★ 122↓ 635.5K/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Maven
13Criticalhealth index
bannedbook/ssvpn
No repository description published.
Kotlin · Java★ 122Aug 1, 2026
GPL-3.0Aug 1, 2026 · metrics 2.10.0
npm
22At Riskhealth index
calipho-sib/feature-viewer
Library to visualize protein sequence features in javascript using D3 - From SIB CALIPHO group; neXtProt project
JavaScript★ 122↓ 386/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
mike-oakley/openapi-pydantic
Modern, type-safe OpenAPI schemas in Python using Pydantic 1.8+ and 2.x
Python★ 122Aug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
34At Riskhealth index
AntelopeIO/leap
C++ implementation of the Antelope protocol
C++ · WebAssembly★ 121Sep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
Python★ 121↓ 1.3M/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
crates.io
22At Riskhealth index
droundy/internment
Interning of data in rust
Rust★ 121↓ 1.2M/moAug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
20At Riskhealth index
feross/ieee754
Read/write IEEE754 floating point numbers from/to a Buffer or array-like object.
JavaScript★ 121↓ 418M/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
62Moderatehealth index
octokit/auth-token.js
GitHub API token authentication for browsers and Node.js
TypeScript · JavaScript★ 121↓ 135M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0