Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,491
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,240 recordsRanked by popularity · browse by tag · record statistics
PyPI
23At Riskhealth index
goldsmith/Wikipedia
A Pythonic wrapper for the Wikipedia API
Python★ 2,998↓ 903.2K/moJul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
npm
25At Riskhealth index
visionmedia/node-progress
Flexible ascii progress bar for nodejs
JavaScript★ 2,989↓ 198M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
datafold/data-diff
Compare tables within or across databases
Python★ 2,988Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
NuGet
45Weakhealth index
jbevain/cecil
Cecil is a library to inspect, modify and create .NET programs and libraries.
C#★ 2,986Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
pharmapsychotic/clip-interrogator
Image to prompt with BLIP and CLIP
Python · Jupyter Notebook★ 2,979Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
30At Riskhealth index
alexreardon/memoize-one
A memoization library which only remembers the latest invocation
TypeScript · JavaScript★ 2,968↓ 138M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jschneier/django-storages
https://django-storages.readthedocs.io/
Python★ 2,956Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 2.10.0
NuGet
14Criticalhealth index
TheBerkin/Rant
(Obsolete) Archive of Rant 3.x.
C#★ 2,943Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
babel/babel-eslint
:tokyo_tower: A wrapper for Babel's parser used for ESLint (renamed to @babel/eslint-parser)
JavaScript★ 2,943↓ 13.7M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
29At Riskhealth index
EventEmitter2/EventEmitter2
A nodejs event emitter implementation with namespaces, wildcards, TTL, works in the browser
JavaScript★ 2,940Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
achillean/shodan-python
The official Python library for Shodan
Python★ 2,928↓ 479.3K/moAug 8, 2026
Custom licenseAug 8, 2026 · metrics 2.10.0
RubyGems
16Criticalhealth index
curtis0x/fake-s3
A lightweight server clone of Amazon S3 that simulates most of the commands supported by S3 with minimal dependencies
Ruby★ 2,928Jul 20, 2026
No licenseJul 20, 2026 · metrics 2.10.0
RubyGems
48Weakhealth index
rubysherpas/paranoia
acts_as_paranoid for Rails 5, 6 and 7
Ruby★ 2,916Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
Packagist
54Moderatehealth index
cocur/slugify
Converts a string to a slug. Includes integrations for Symfony, Silex, Laravel, Zend Framework 2, Twig, Nette and Latte.
PHP★ 2,903↓ 1.4M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
grantjenks/python-diskcache
Python disk-backed cache (Django-compatible). Faster than Redis and Memcached. Pure-Python.
Python★ 2,898Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
explorerhq/sql-explorer
SQL reporting that Just Works. Fast, simple, and confusion-free. Write and share queries in a delightful SQL editor, with AI assistance.
Python · JavaScript · HTML★ 2,879↓ 262.5K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
50Moderatehealth index
roo-rb/roo
Roo provides an interface to spreadsheets of several sorts.
Ruby★ 2,875Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
32At Riskhealth index
Azure/fetch-event-source
A better API for making Event Source requests, with all the features of fetch()
TypeScript★ 2,866↓ 11.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
NuGet
30At Riskhealth index
benaadams/Ben.Demystifier
High performance understanding for stack traces (Make error logs more productive)
C#★ 2,866Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
zombocom/wicked
Use wicked to turn your controller into a wizard
Ruby · JavaScript · HTML★ 2,854Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
pexpect/pexpect
A Python module for controlling interactive programs in a pseudo-terminal
Python★ 2,843Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
Textualize/trogon
Easily turn your Click CLI into a powerful terminal application
Python★ 2,839↓ 310.9K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
apache/horaedb
Apache HoraeDB (incubating) is a high-performance, distributed, cloud native time-series database.
Rust★ 2,828Sep 2, 2026
Apache-2.0Sep 2, 2026 · metrics 2.10.0
Maven · PyPI
34At Riskhealth index
whylabs/whylogs
An open-source data logging library for machine learning models and data pipelines. 📚 Provides visibility into data quality & model performance over time. 🛡️ Supports privacy-preserving data collection, ensuring safety & robustness. 📈
Jupyter Notebook · Python · HTML★ 2,828Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
23At Riskhealth index
TehShrike/deepmerge
A library for deep (recursive) merging of Javascript objects
JavaScript★ 2,816↓ 340M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Maven · npm · RubyGems
23At Riskhealth index
youniaogu/MangaReader
一个漫画 APP📱,基于 react-native 构建,兼容 Android、Ios 平台
TypeScript★ 2,802Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
mobolic/facebook-sdk
Python SDK for Facebook's Graph API
Python★ 2,793↓ 483.6K/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
spdy-http2/node-spdy
SPDY server on Node.js
JavaScript★ 2,792Aug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
npm
22At Riskhealth index
websockets/wscat
WebSocket cat
JavaScript★ 2,774↓ 91.7K/moSep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
Packagist
54Moderatehealth index
PHP-DI/PHP-DI
The dependency injection container for humans
PHP★ 2,772↓ 2.9M/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0