Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,131
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,388 recordsRanked by popularity · browse by tag · record statistics
PyPI
32At Riskhealth index
nickstenning/honcho
Honcho: a python clone of Foreman. For managing Procfile-based applications.
Python★ 1,712↓ 2.2M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
37Weakhealth index
crcn/sift.js
Use Mongodb queries in JavaScript
JavaScript · TypeScript★ 1,702↓ 24.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
lquixada/cross-fetch
Universal WHATWG Fetch API for Node, Browsers and React Native.
JavaScript · TypeScript★ 1,695↓ 142M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
lukeed/kleur
The fastest Node.js library for formatting terminal text with ANSI colors~!
JavaScript · Shell★ 1,695↓ 354M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
dropbox/PyHive
Python interface to Hive and Presto. 🐝
Python★ 1,693↓ 6M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
mathiasbynens/punycode.js
A robust Punycode converter that fully complies to RFC 3492 and RFC 5891.
JavaScript★ 1,692↓ 772M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
rustedpy/result
NOT MAINTAINED - A simple Rust like Result type for Python 3. Fully type annotated.
Python★ 1,681↓ 2.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
23At Riskhealth index
foliojs/fontkit
An advanced font engine for Node and the browser
JavaScript★ 1,670↓ 49M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
JavaScript★ 1,666Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
FormidableLabs/react-fast-compare
fastest deep equal comparison for React
JavaScript★ 1,665↓ 97.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
getsentry/raven-python
Raven is the legacy Python client for Sentry (getsentry.com) — replaced by sentry-python
Python★ 1,661↓ 1.5M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
DenisCarriere/geocoder
:earth_asia: Python Geocoder
Python★ 1,657↓ 1.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
mortada/fredapi
Python API for FRED (Federal Reserve Economic Data) and ALFRED (Archival FRED)
Python★ 1,657↓ 1.1M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
rwightman/efficientdet-pytorch
A PyTorch impl of EfficientDet faithful to the original Google impl w/ ported weights
Python★ 1,656↓ 441.1K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
19Criticalhealth index
corona-warn-app/cwa-app-ios
Native iOS app using the exposure notification framework from Apple. The CWA development ends on May 31, 2023. You still can warn other users until April 30, 2023. More information:
Swift★ 1,651Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
breuleux/jurigged
Hot reloading for Python
Python★ 1,647↓ 494.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pixelb/ps_mem
A utility to accurately report the in core memory usage for a program
Python★ 1,641↓ 1.4M/moSep 17, 2026
LGPL-2.1Sep 17, 2026 · metrics 2.10.0
PyPI
60Moderatehealth index
facebookincubator/submitit
Python 3.8+ toolbox for submitting jobs to Slurm
Python★ 1,640Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
datamade/usaddress
:us: a python library for parsing unstructured United States address strings into address components
Python★ 1,637Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
41Weakhealth index
rpgtex/DND-5e-LaTeX-Template
LaTeX package to typeset material for the fifth edition of the "world's greatest roleplaying game".
TeX★ 1,629Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
36Weakhealth index
jorgebucaran/colorette
🌈Easily set your terminal text color & styles
JavaScript★ 1,624↓ 276M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
30At Riskhealth index
d3/d3-scale
Encodings that map abstract data to visual representation.
JavaScript★ 1,616↓ 280M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
litl/rauth
A Python library for OAuth 1.0/a, 2.0, and Ofly.
Python★ 1,599Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
cgarciae/pypeln
Concurrent data pipelines in Python >>>
Python★ 1,597↓ 85.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
os/slacker
Full-featured Python interface for the Slack API
Python★ 1,589↓ 469K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
cruft/cruft
Allows you to maintain all the necessary cruft for packaging and building projects separate from the code you intentionally write. Built on-top of, and fully compatible with, CookieCutter.
Python★ 1,587Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
circus-tent/circus
A Process & Socket Manager built with zmq
Python★ 1,579↓ 472.8K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
thephpleague/event
Event package for your app and domain
PHP★ 1,570↓ 5.7M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
mbr/flask-bootstrap
Ready-to-use Twitter-bootstrap for use in Flask.
Python · HTML★ 1,560↓ 557.4K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
rust-crdt/rust-crdt
a collection of well-tested, serializable CRDTs for Rust
Rust★ 1,545↓ 283.9K/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0