Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,459
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,240 recordsRanked by popularity · browse by tag · record statistics
npm
16Criticalhealth index
standard-things/esm
Tomorrow's ECMAScript modules today!
JavaScript★ 5,242Aug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rest-client/rest-client
Simple HTTP and REST client for Ruby, inspired by microframework syntax for specifying actions.
Ruby★ 5,212Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet
32At Riskhealth index
JoshClose/CsvHelper
Library to help reading and writing CSV files
C# · CSS★ 5,209Aug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
28At Riskhealth index
Marak/colors.js
get colors in your node.js console
JavaScript★ 5,167↓ 108M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rails-api/rails-api
Rails for API only applications
Ruby★ 5,129Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
vmg/redcarpet
The safe Markdown parser, reloaded.
C · HTML · Ruby★ 5,079Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
Lyken17/pytorch-OpCounter
Count the MACs / FLOPs of your PyTorch model.
Python★ 5,078↓ 887K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
19Criticalhealth index
hashicorp/terraform-cdk
Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
TypeScript★ 5,075↓ 2.1M/moAug 12, 2026
MPL-2.0Aug 12, 2026 · metrics 2.10.0
npm · Maven
29At Riskhealth index
itinance/react-native-fs
Native filesystem access for react-native
C++ · C# · Objective-C★ 5,043↓ 2.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
Netflix/fast_jsonapi
No Longer Maintained - A lightning fast JSON:API serializer for Ruby Objects.
Ruby★ 5,032Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · RubyGems
64Moderatehealth index
google/pytype
A static type analyzer for Python code
Python★ 5,029↓ 924.9K/moAug 8, 2026
Custom licenseAug 8, 2026 · metrics 2.10.0
Packagist
45Weakhealth index
PHP-FFMpeg/PHP-FFMpeg
An object oriented PHP driver for FFMpeg binary
PHP★ 5,017↓ 815.5K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Instagram/MonkeyType
A Python library that generates static type annotations by collecting runtime types
Python★ 5,000Aug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
googlemaps/google-maps-services-python
Python client library for Google Maps API Web Services
Python★ 4,968↓ 3.1M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
Kinnara/ModernWpf
Modern styles and controls for your WPF applications
C#★ 4,959Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet
26At Riskhealth index
MediaBrowser/Emby
Emby Server is a personal media server with apps on just about every device.
C#★ 4,950Aug 11, 2026
GPL-2.0Aug 11, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
backup/backup
Easy full stack backup operations on UNIX-like systems.
Ruby★ 4,858Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
34At Riskhealth index
uber-go/automaxprocs
Automatically set GOMAXPROCS to match Linux container CPU quota.
Go★ 4,847Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
jenssegers/agent
👮 A PHP desktop/mobile user agent parser with support for Laravel, based on Mobiledetect
PHP★ 4,842↓ 1.5M/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
NuGet
29At Riskhealth index
commandlineparser/commandline
The best C# command line parser that brings standardized *nix getopt style, for .NET. Includes F# support
C#★ 4,816Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
45Weakhealth index
dustin/go-humanize
Go Humans! (formatters for units to human friendly sizes)
Go★ 4,811Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
ronmamo/reflections
Java runtime metadata analysis
Java★ 4,764Aug 28, 2026
WTFPLAug 28, 2026 · metrics 2.10.0
14Criticalhealth index
ronggang/transmission-web-control
一个 Transmission 浏览器管理界面。Transmission Web Control is a custom web UI. (该项目不再维护。)
CSS · JavaScript · HTML★ 4,740Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
34At Riskhealth index
Masterminds/sprig
Useful template functions for Go templates.
Go★ 4,737Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
symfony/polyfill-php72
Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions
Mixed★ 4,728↓ 4.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
19Criticalhealth index
jsonresume/resume-cli
MOVED to jsonresume/jsonresume.org (packages/cli) — npm 'resume-cli' unchanged, revived for Node 18+
JavaScript★ 4,719↓ 2,149/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
28At Riskhealth index
jinzhu/now
Now is a time toolkit for golang
Go★ 4,700Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
37Weakhealth index
stackblitz/webcontainer-core
Dev environments. In your web app.
Mixed★ 4,630Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0