Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,629
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,407 recordsRanked by popularity · browse by tag · record statistics
Packagist
31At Riskhealth index
php-fig/event-dispatcher
No repository description published.
PHP★ 2,284↓ 18.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
globocom/m3u8
Python m3u8 Parser for HTTP Live Streaming (HLS) Transmissions
Python★ 2,278Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
macournoyer/thin
A very fast & simple Ruby web server
Ruby · C★ 2,275Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
helpers/handlebars-helpers
188 handlebars helpers in ~20 categories. Can be used with Assemble, Ghost, YUI, express.js etc.
JavaScript★ 2,269↓ 412.2K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spring-attic/spring-retry
No repository description published.
Java★ 2,264Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pyscaffold/pyscaffold
🛠 Python project template generator with batteries included
Python★ 2,260↓ 1M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
30At Riskhealth index
dominikbraun/graph
A library for creating generic graph data structures and modifying, analyzing, and visualizing them.
Go★ 2,227Sep 23, 2026
Apache-2.0Sep 23, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
galetahub/ckeditor
Ckeditor 4.x integration gem for rails
Ruby · JavaScript★ 2,224Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
ReaJason/xhs
基于小红书 Web 端进行的请求封装。https://reajason.github.io/xhs/
Python★ 2,219Oct 12, 2026
MITOct 12, 2026 · metrics 2.10.0
npm
20At Riskhealth index
plurals/pluralize
Pluralize or singularize any word based on a count
JavaScript★ 2,215Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
sebastianbergmann/phpcpd
Copy/Paste Detector (CPD) for PHP code.
PHP★ 2,209↓ 426.9K/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
RubyGems
48Weakhealth index
thoughtbot/shoulda
Makes tests easy on the fingers and the eyes
Ruby★ 2,204Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
evanw/node-source-map-support
Adds source map support to node.js (for stack traces)
JavaScript★ 2,194↓ 489M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
31At Riskhealth index
hamcrest/JavaHamcrest
Java (and original) version of Hamcrest
Java★ 2,190Sep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
—
19Criticalhealth index
dotnet/pinvoke
A library containing all P/Invoke code so you don't have to import it every time. Maintained and updated to support the latest Windows OS.
C#★ 2,175Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
17Criticalhealth index
dominictarr/event-stream
EventStream is like functional programming meets IO
JavaScript★ 2,174↓ 23.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/django-widget-tweaks
Tweak the form field rendering in templates, not in python-level form definitions. CSS classes and HTML attributes can be altered.
Python★ 2,163↓ 1.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
—
26At Riskhealth index
Antaris/RazorEngine
Open source templating engine based on Microsoft's Razor parsing engine
C#★ 2,157Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
gabrielfalcao/HTTPretty
Intercept HTTP requests at the Python socket level. Fakes the whole socket module
Python★ 2,156↓ 965.2K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Hex
28At Riskhealth index
bitwalker/libcluster
Automatic cluster formation/healing for Elixir applications
Elixir★ 2,155↓ 446.5K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
23At Riskhealth index
sutoiku/formula.js
JavaScript implementation of most Microsoft Excel formula functions
JavaScript★ 2,155↓ 16.7K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
—
18Criticalhealth index
leanprover/lean3
Lean Theorem Prover
C++ · Lean★ 2,153Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
PyPI · crates.io
30At Riskhealth index
wasmerio/wasmer-python
🐍🕸 WebAssembly runtime for Python
Rust · Python★ 2,153↓ 733.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
NuGet
37Weakhealth index
CollaboratingPlatypus/PetaPoco
Official PetaPoco, A tiny ORM-ish thing for your POCO's
C#★ 2,142Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
26At Riskhealth index
cespare/xxhash
A Go implementation of the 64-bit xxHash algorithm (XXH64)
Go · Assembly★ 2,142Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
55Moderatehealth index
kubeshop/monokle
Monokle is a set of OSS tools designed to help create and maintain high-quality Kubernetes configurations throughout the application lifecycle
TypeScript★ 2,142Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
32At Riskhealth index
taylorhakes/promise-polyfill
Lightweight ES6 Promise polyfill for the browser and node. A+ Compliant
JavaScript★ 2,142↓ 20.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
20At Riskhealth index
araddon/dateparse
GoLang Parse many date strings without knowing format in advance.
Go★ 2,141Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0