Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,309
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,282 recordsRanked by popularity · browse by tag · record statistics
PyPI
25At Riskhealth index
grantjenks/python-sortedcontainers
Python Sorted Container Types: Sorted List, Sorted Dict, and Sorted Set
Python★ 3,982Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
boppreh/keyboard
Hook and simulate global keyboard events on Windows and Linux.
Python★ 3,967Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
pyppeteer/pyppeteer
Headless chrome/chromium automation library (unofficial port of puppeteer)
Python★ 3,941↓ 821.5K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
icsharpcode/SharpZipLib
#ziplib is a Zip, GZip, Tar and BZip2 library written entirely in C# for the .NET platform.
C#★ 3,932Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
—
13Criticalhealth index
Knetic/govaluate
Arbitrary expression evaluation for golang
Go★ 3,929Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
NuGet · npm
19Criticalhealth index
thomhurst/TUnit
A modern, fast and flexible .NET testing framework
C#★ 3,927Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
—
17Criticalhealth index
fatih/structs
Utilities for Go structs
Go★ 3,920Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
rlabbe/filterpy
Python Kalman filtering and optimal estimation library. Implements Kalman filter, particle filter, Extended Kalman filter, Unscented Kalman filter, g-h (alpha-beta), least squares, H Infinity, smoothers, and more. Has companion book 'Kalman and Bayesian Filters in Python'.
Python★ 3,871Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
elastic/elasticsearch-dsl-py
High level Python client for Elasticsearch
Python★ 3,869Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
defuse/php-encryption
Simple Encryption in PHP.
PHP★ 3,867↓ 5.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
57Moderatehealth index
canvg/canvg
JavaScript SVG parser and renderer on Canvas
TypeScript · JavaScript★ 3,835↓ 51.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
facebook/regenerator
Source transformer enabling ECMAScript 6 generator functions in JavaScript-of-today.
JavaScript★ 3,823↓ 782.6K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
FactoryBoy/factory_boy
A test fixtures replacement for Python
Python★ 3,805↓ 23.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
nalepae/pandarallel
A simple and efficient tool to parallelize Pandas operations on all available CPUs
Python★ 3,798Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
css/csso
CSS minifier with structural optimizations
JavaScript · CSS★ 3,784↓ 119M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
ralouphie/getallheaders
PHP getallheaders polyfill
PHP★ 3,778↓ 20.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
—
37Weakhealth index
TheNetAdmin/zjuthesis
Zhejiang University Graduation Thesis LaTeX Template
TeX · Shell★ 3,753Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
—
12Criticalhealth index
GodotSteam/GodotSteam
An ecosystem of tools for Godot Engine and Valve's Steam. For Linux, Mac, and Windows.
Mixed★ 3,746Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
flasgger/flasgger
Easy OpenAPI specs and Swagger UI for your Flask API
Python · JavaScript · HTML★ 3,744↓ 763.6K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
solnic/virtus
[DISCONTINUED ] Attributes on Steroids for Plain Old Ruby Objects
Ruby★ 3,744Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
30At Riskhealth index
go-gorp/gorp
Go Relational Persistence - an ORM-ish library for Go
Go★ 3,742Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
27At Riskhealth index
kach/nearley
📜🔜🌲 Simple, fast, powerful parser toolkit for JavaScript.
JavaScript · HTML★ 3,742Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
GeneralMills/pytrends
Pseudo API for Google Trends
Python★ 3,729Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
NuGet
31At Riskhealth index
StephenCleary/AsyncEx
A helper library for async/await.
C#★ 3,725Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
34At Riskhealth index
microcosm-cc/bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Go★ 3,719Sep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
—
19Criticalhealth index
blackmagic-debug/blackmagic
In-application debugger for ARM Cortex and RISC-V processors.
Mixed★ 3,718Sep 9, 2026
GPL-3.0Sep 9, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
sds/scss-lint
Configurable tool for writing clean, consistent SCSS
Ruby★ 3,680Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
maxcountryman/flask-login
Flask user session management.
Python★ 3,675↓ 25.8M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
seatgeek/thefuzz
Fuzzy String Matching in Python
Python★ 3,645↓ 10.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
31At Riskhealth index
dave/jennifer
Jennifer is a code generator for Go
Go★ 3,630Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0