Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,131
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,417 recordsRanked by popularity · browse by tag · record statistics
npm
36Weakhealth index
jorgebucaran/colorette
🌈Easily set your terminal text color & styles
JavaScript★ 1,624↓ 276M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
30At Riskhealth index
d3/d3-scale
Encodings that map abstract data to visual representation.
JavaScript★ 1,616↓ 280M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
litl/rauth
A Python library for OAuth 1.0/a, 2.0, and Ofly.
Python★ 1,599Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
cgarciae/pypeln
Concurrent data pipelines in Python >>>
Python★ 1,597↓ 85.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
os/slacker
Full-featured Python interface for the Slack API
Python★ 1,589↓ 469K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
cruft/cruft
Allows you to maintain all the necessary cruft for packaging and building projects separate from the code you intentionally write. Built on-top of, and fully compatible with, CookieCutter.
Python★ 1,587Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
circus-tent/circus
A Process & Socket Manager built with zmq
Python★ 1,579↓ 472.8K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
thephpleague/event
Event package for your app and domain
PHP★ 1,570↓ 5.7M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
mbr/flask-bootstrap
Ready-to-use Twitter-bootstrap for use in Flask.
Python · HTML★ 1,560↓ 557.4K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
rust-crdt/rust-crdt
a collection of well-tested, serializable CRDTs for Rust
Rust★ 1,545↓ 283.9K/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
25At Riskhealth index
indutny/node-ip
IP address tools for node.js
JavaScript★ 1,543↓ 32.6M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nithinmurali/pygsheets
Google Sheets Python API v4
Python★ 1,543↓ 1.7M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
51Moderatehealth index
thephpleague/plates
Native PHP template system
PHP★ 1,528↓ 109.8K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
27At Riskhealth index
AriaMinaei/pretty-error
See node.js errors with less clutter
CoffeeScript★ 1,522↓ 56.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
rq/rq-scheduler
A lightweight library that adds job scheduling capabilities to RQ (Redis Queue)
Python★ 1,516↓ 489.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
sigsep/open-unmix-pytorch
Open-Unmix - Music Source Separation for PyTorch
Python★ 1,505↓ 194.1K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
23At Riskhealth index
ricmoo/aes-js
A pure JavaScript implementation of the AES block cipher and all common modes of operation for node.js or web browsers.
JavaScript★ 1,495↓ 14.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
scottie1984/swagger-ui-express
Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
HTML · JavaScript★ 1,495↓ 17.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
erikrose/blessings
A thin, practical wrapper around terminal capabilities in Python
Python★ 1,488↓ 1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
CamDavidsonPilon/lifetimes
Lifetime value in Python
Python★ 1,476↓ 239.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
google-deepmind/jraph
A Graph Neural Network Library in Jax
Python★ 1,474Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
puleos/object-hash
Generate hashes from javascript objects in node and the browser.
JavaScript★ 1,473↓ 260M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
mmatl/pyrender
Easy-to-use glTF 2.0-compliant OpenGL renderer for visualization of 3D scenes.
Python★ 1,469↓ 1.2M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
lukeed/dequal
A tiny (304B to 489B) utility to check for deep equality
JavaScript★ 1,468↓ 324M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
airbnb/binaryalert
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Python · YARA · HCL★ 1,455Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
scroll-into-view/scroll-into-view-if-needed
Element.scrollIntoView ponyfills for things like "if-needed" and "smooth"
JavaScript · HTML★ 1,451↓ 35.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
ferrilab/bitvec
A crate for managing memory bit by bit
Rust★ 1,450Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
lepture/flask-oauthlib
YOU SHOULD USE https://github.com/lepture/authlib
Python★ 1,446↓ 287.9K/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
AndrewIngram/django-extra-views
Django's class-based generic views are awesome, let's have more of them.
Python★ 1,436↓ 237.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
DirtyHairy/async-mutex
A mutex for synchronizing async workflows in Javascript
TypeScript★ 1,434↓ 46.1M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0