Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,499
Monthly downloads under inspection
581B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,587 recordsRanked by popularity · browse by tag · record statistics
npm
41Weakhealth index
ilearnio/module-alias
Register aliases of directories and custom module paths in Node
JavaScript★ 1,789↓ 15.7M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
41Weakhealth index
gettalong/kramdown
kramdown is a fast, pure Ruby Markdown superset converter, using a strict syntax definition and supporting several common extensions.
Ruby · HTML★ 1,779Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
npm
50Moderatehealth index
ThomasAribart/json-schema-to-ts
Infer TS types from JSON schemas 📝
TypeScript★ 1,778↓ 106M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
27At Riskhealth index
medikoo/memoizee
Complete memoize/cache solution for JavaScript
JavaScript★ 1,778↓ 23M/moAug 13, 2026
ISCAug 13, 2026 · metrics 2.10.0
npm
55Moderatehealth index
Noovolari/leapp
Leapp is the DevTool to access your cloud
TypeScript★ 1,775↓ 29/moAug 28, 2026
MPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
django-money/django-money
Money fields for Django forms and models.
Python★ 1,775Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
requests/requests-oauthlib
OAuthlib support for Python-Requests!
Python★ 1,774Sep 9, 2026
ISCSep 9, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
danielgtaylor/python-betterproto
Clean, modern, Python 3.6+ code generator & library for Protobuf 3 and async gRPC
Python★ 1,770Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
32At Riskhealth index
SpatiumPortae/portal
Portal is a quick and easy command-line file transfer utility from any computer to another 🌌 ✨
Go · HTML★ 1,763Aug 20, 2026
MITAug 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
indutny/elliptic
Fast Elliptic Curve Cryptography in plain javascript
JavaScript★ 1,763↓ 59.1M/moAug 7, 2026
No licenseAug 7, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpdavis/python-jose
A JOSE implementation in Python
Python★ 1,756↓ 43.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
12Criticalhealth index
que-etc/resize-observer-polyfill
A polyfill for the Resize Observer API
JavaScript★ 1,752↓ 57.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
crates.io
36Weakhealth index
queer/boxxy
boxxy puts bad Linux applications in a box with only their files.
Rust★ 1,745Aug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
19Criticalhealth index
OpenNebula/one
The open source Cloud & Edge Computing Platform bringing real freedom to your Enterprise Cloud 🚀
JavaScript · C++ · Ruby★ 1,742Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go
34At Riskhealth index
gorilla/handlers
Package gorilla/handlers is a collection of useful middleware for Go HTTP services & web applications 🛃
Go★ 1,740Aug 19, 2026
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
npm
26At Riskhealth index
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
JavaScript★ 1,738↓ 861M/moAug 4, 2026
ISCAug 4, 2026 · metrics 2.10.0
npm
25At Riskhealth index
rvagg/node-worker-farm
Distribute processing tasks to child processes with an über-simple API and baked-in durability & custom concurrency options.
JavaScript★ 1,737↓ 14.6M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
Go
23At Riskhealth index
tj/mmake
Modern Make
Go★ 1,737Aug 18, 2026
No licenseAug 18, 2026 · metrics 2.10.0
Go
18Criticalhealth index
mitchellh/cli
A Go library for implementing command-line interfaces.
Go★ 1,735Aug 29, 2026
MPL-2.0Aug 29, 2026 · metrics 2.10.0
npm
29At Riskhealth index
lukeed/klona
A tiny (240B to 501B) and fast utility to "deep clone" Objects, Arrays, Dates, RegExps, and more!
JavaScript★ 1,731↓ 57.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
grafana-cold-storage/agent
Vendor-neutral programmable observability pipelines.
Go★ 1,727Aug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
google-research/torchsde
Differentiable SDE solvers with GPU support and efficient sensitivity analysis.
Python★ 1,726↓ 1.9M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
rspeer/wordfreq
Access a database of word frequencies, in various natural languages.
Python★ 1,726Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
16Criticalhealth index
eykrehbein/strest
⚡️ CI-ready tests for REST APIs configured in YAML
TypeScript★ 1,721↓ 73/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
octo-models/octo
Octo is a transformer-based robot policy trained on a diverse mix of 800k robot trajectories.
Python★ 1,721Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
phosphor-icons/react
A flexible icon family for React
TypeScript★ 1,718↓ 11.3M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
51Moderatehealth index
jldbc/pybaseball
Pull current and historical baseball statistics using Python (Statcast, Baseball Reference, FanGraphs)
Python★ 1,717↓ 273K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
nickstenning/honcho
Honcho: a python clone of Foreman. For managing Procfile-based applications.
Python★ 1,712↓ 2.2M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
tomerfiliba-org/rpyc
RPyC (Remote Python Call) - A transparent and symmetric RPC library for python
Python★ 1,705↓ 1.3M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0