Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,309
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,282 recordsRanked by popularity · browse by tag · record statistics
npm
23At Riskhealth index
mathiasbynens/he
A robust HTML entity encoder/decoder written in JavaScript.
JavaScript★ 3,597↓ 165M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
14Criticalhealth index
tildeio/rsvp.js
A lightweight library that provides tools for organizing asynchronous code
JavaScript★ 3,593↓ 21.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pytorch/text
Models, data loaders and abstractions for language processing, powered by PyTorch
Python · C++★ 3,554Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
abhinavsingh/proxy.py
💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework
Python★ 3,550↓ 628.9K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
42Weakhealth index
C★ 3,541Sep 10, 2026
GPL-2.0Sep 10, 2026 · metrics 2.10.0
PyPI
38Weakhealth index
life4/textdistance
📐 Compute distance between sequences. 30+ algorithms, pure python implementation, common interface, optional external libs usage.
Python★ 3,538Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
40Weakhealth index
scanny/python-pptx
Create Open XML PowerPoint documents in Python
Python★ 3,533↓ 52.1M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
andywer/threads.js
🧵 Make web workers & worker threads as simple as a function call.
TypeScript★ 3,532↓ 3.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
—
34At Riskhealth index
tensorflow/hub
A library for transfer learning by reusing parts of TensorFlow models.
Python★ 3,528Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
overviewer/Minecraft-Overviewer
Render high-resolution maps of a Minecraft world with a Leaflet powered interface
Python · C★ 3,498Sep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
collectiveidea/audited
Audited (formerly acts_as_audited) is an ORM extension that logs all changes to your Rails models.
Ruby★ 3,497Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
19Criticalhealth index
opentracing/opentracing-go
OpenTracing API for Go. 🛑 This library is DEPRECATED! https://github.com/opentracing/specification/issues/163
Go★ 3,478Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
ferredoxin/QNotified
一个旨在使QQ变得更好用的开源Xposed模块
Java · Kotlin · C++★ 3,465Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
michelf/php-markdown
Parser for Markdown and Markdown Extra derived from the original Markdown.pl by John Gruber.
PHP · HTML★ 3,462↓ 779.1K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
—
12Criticalhealth index
rcrowley/go-metrics
Go port of Coda Hale's Metrics library
Go★ 3,460Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
mayuki/Cocona
Micro-framework for .NET console application. Cocona makes it easy and fast to build console applications on .NET.
C#★ 3,452Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
46Weakhealth index
ulid/javascript
Universally Unique Lexicographically Sortable Identifier
TypeScript · JavaScript★ 3,445↓ 40.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
—
36Weakhealth index
matro7sh/BypassAV
This map lists the essential techniques to bypass anti-virus and EDR
Mixed★ 3,442Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
stevenpetryk/mafs
React components for interactive math
TypeScript★ 3,434↓ 123.2K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
devongovett/regexgen
Generate regular expressions that match a set of strings
JavaScript★ 3,422↓ 1M/moSep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
45Weakhealth index
decalage2/oletools
oletools - python tools to analyze MS OLE2 files (Structured Storage, Compound File Binary Format) and MS Office documents, for malware analysis, forensics and debugging.
Python★ 3,414↓ 7.6M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
browserbase/mcp-server-browserbase
Allow LLMs to control a browser with Browserbase and Stagehand
TypeScript★ 3,405↓ 9,589/moOct 7, 2026
Apache-2.0Oct 7, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
openhab/openhab1-addons
Add-ons for openHAB 1.x
Java★ 3,396Sep 11, 2026
EPL-2.0Sep 11, 2026 · metrics 2.10.0
Go
19Criticalhealth index
gobuffalo/packr
The simple and easy way to embed static files into Go binaries.
Go★ 3,385Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io · PyPI
34At Riskhealth index
servo/webrender
A GPU-based renderer for the web
Rust★ 3,377↓ 217K/moOct 20, 2026
MPL-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
databricks/koalas
Koalas: pandas API on Apache Spark
Python★ 3,375↓ 666.1K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
41Weakhealth index
esamattis/underscore.string
String manipulation helpers for javascript
JavaScript★ 3,358Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
sensiolabs/SensioFrameworkExtraBundle
An extension to Symfony FrameworkBundle that adds annotation configuration for Controller classes
PHP★ 3,350↓ 901.8K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
krisleech/wisper
A micro library providing Ruby objects with Publish-Subscribe capabilities
Ruby★ 3,334Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
Go
25At Riskhealth index
valyala/quicktemplate
Fast, powerful, yet easy to use template engine for Go. Optimized for speed, zero memory allocations in hot paths. Up to 20x faster than html/template
Go★ 3,324Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0