Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,086
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,439 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
typestack/class-transformer
Decorator-based transformation, serialization, and deserialization between objects and classes.
TypeScript★ 7,341↓ 47.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
PAIR-code/facets
Visualizations for machine learning datasets
Jupyter Notebook · HTML★ 7,332Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
unjs/consola
🐨 Elegant Console Logger for Node.js and Browser
TypeScript★ 7,326↓ 210M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
15Criticalhealth index
stefanpenner/es6-promise
A polyfill for ES6-style Promises
JavaScript★ 7,249↓ 71.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
bubkoo/html-to-image
✂️ Generates an image from a DOM node using HTML5 canvas and SVG.
TypeScript★ 7,237↓ 22.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
kennethreitz/records
SQL for Humans™
Python★ 7,219↓ 223.3K/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
trentm/node-bunyan
a simple and fast JSON logging module for node.js services
JavaScript · Perl★ 7,208↓ 14.3M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
json5/json5
JSON5 — JSON for Humans
JavaScript★ 7,162↓ 868M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
millsp/ts-toolbelt
👷 TypeScript's largest type utility library
TypeScript★ 7,150↓ 37.4M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
sindresorhus/screenfull
Simple wrapper for cross-browser usage of the JavaScript Fullscreen API
HTML · JavaScript · TypeScript★ 7,139↓ 19.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
jquery/esprima
ECMAScript parsing infrastructure for multipurpose analysis
TypeScript · JavaScript★ 7,138↓ 395M/moSep 16, 2026
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ianstormtaylor/superstruct
A simple and composable way to validate data in JavaScript (and TypeScript).
TypeScript★ 7,130↓ 23.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
21At Riskhealth index
LasCC/HackTools
The all-in-one browser extension for offensive security professionals 🛠
TypeScript★ 7,026Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
28At Riskhealth index
zenoamaro/react-quill
A Quill component for React.
JavaScript · TypeScript★ 7,006↓ 18.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
matthew-andrews/isomorphic-fetch
Isomorphic WHATWG Fetch API, for Node & Browserify
JavaScript★ 6,905↓ 41.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
41Weakhealth index
webclipper/web-clipper
For Notion,OneNote,Bear,Yuque,Joplin。Clip anything to anywhere
TypeScript★ 6,850Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
30At Riskhealth index
google/gopacket
Provides packet processing capabilities for Go
Go★ 6,795Sep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytransitions/transitions
A lightweight, object-oriented finite state machine implementation in Python with many extensions
Python★ 6,590↓ 2.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
kentcdodds/cross-env
🔀 Cross platform setting of environment scripts
TypeScript · JavaScript★ 6,523↓ 94M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
rtqichen/torchdiffeq
Differentiable ODE solvers with full GPU support and O(1)-memory backpropagation.
Python★ 6,483↓ 654.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
KevinMusgrave/pytorch-metric-learning
The easiest way to use deep metric learning in your application. Modular, flexible, and extensible. Written in PyTorch.
Python★ 6,341↓ 3.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
pacocoursey/next-themes
Perfect Next.js dark mode in 2 lines of code. Support System preference and any other theme with no flashing
TypeScript★ 6,334↓ 93.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · Packagist
28At Riskhealth index
medialize/URI.js
Javascript URL mutation library
JavaScript · HTML★ 6,227↓ 23.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
angus-c/just
A library of dependency-free JavaScript utilities that do just one thing.
JavaScript · TypeScript★ 6,200↓ 43.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
gitbrent/PptxGenJS
Build PowerPoint presentations with JavaScript. Works with Node, React, web browsers, and more.
TypeScript★ 6,174↓ 10.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
54Moderatehealth index
graffle-js/graffle
Simple GraphQL Client for JavaScript. Minimal. Extensible. Type Safe. Runs everywhere.
TypeScript · HTML★ 6,119Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
alangpierce/sucrase
Super-fast alternative to Babel for when you can target modern JS runtimes
TypeScript★ 5,870↓ 181M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
mikaelbr/node-notifier
A Node.js module for sending notifications on native Mac, Windows and Linux (or Growl as fallback)
JavaScript★ 5,841↓ 19.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
mysticatea/npm-run-all
A CLI tool to run multiple npm-scripts in parallel or sequential.
JavaScript★ 5,832↓ 18.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
Layout-Parser/layout-parser
A Unified Toolkit for Deep Learning Based Document Image Analysis
Python★ 5,779↓ 93.3K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0