Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,131
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,388 recordsRanked by popularity · browse by tag · record statistics
npm
25At Riskhealth index
indutny/node-ip
IP address tools for node.js
JavaScript★ 1,543↓ 32.6M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nithinmurali/pygsheets
Google Sheets Python API v4
Python★ 1,543↓ 1.7M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
51Moderatehealth index
thephpleague/plates
Native PHP template system
PHP★ 1,528↓ 109.8K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
27At Riskhealth index
AriaMinaei/pretty-error
See node.js errors with less clutter
CoffeeScript★ 1,522↓ 56.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
rq/rq-scheduler
A lightweight library that adds job scheduling capabilities to RQ (Redis Queue)
Python★ 1,516↓ 489.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
sigsep/open-unmix-pytorch
Open-Unmix - Music Source Separation for PyTorch
Python★ 1,505↓ 194.1K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
23At Riskhealth index
ricmoo/aes-js
A pure JavaScript implementation of the AES block cipher and all common modes of operation for node.js or web browsers.
JavaScript★ 1,495↓ 14.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
scottie1984/swagger-ui-express
Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
HTML · JavaScript★ 1,495↓ 17.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
erikrose/blessings
A thin, practical wrapper around terminal capabilities in Python
Python★ 1,488↓ 1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
CamDavidsonPilon/lifetimes
Lifetime value in Python
Python★ 1,476↓ 239.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
google-deepmind/jraph
A Graph Neural Network Library in Jax
Python★ 1,474Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
puleos/object-hash
Generate hashes from javascript objects in node and the browser.
JavaScript★ 1,473↓ 260M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
mmatl/pyrender
Easy-to-use glTF 2.0-compliant OpenGL renderer for visualization of 3D scenes.
Python★ 1,469↓ 1.2M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
lukeed/dequal
A tiny (304B to 489B) utility to check for deep equality
JavaScript★ 1,468↓ 324M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
airbnb/binaryalert
BinaryAlert: Serverless, Real-time & Retroactive Malware Detection.
Python · YARA · HCL★ 1,455Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
scroll-into-view/scroll-into-view-if-needed
Element.scrollIntoView ponyfills for things like "if-needed" and "smooth"
JavaScript · HTML★ 1,451↓ 35.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
ferrilab/bitvec
A crate for managing memory bit by bit
Rust★ 1,450Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
lepture/flask-oauthlib
YOU SHOULD USE https://github.com/lepture/authlib
Python★ 1,446↓ 287.9K/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
AndrewIngram/django-extra-views
Django's class-based generic views are awesome, let's have more of them.
Python★ 1,436↓ 237.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
DirtyHairy/async-mutex
A mutex for synchronizing async workflows in Javascript
TypeScript★ 1,434↓ 46.1M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
verigak/progress
Easy to use progress bars for Python
Python★ 1,434↓ 2.2M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
MSPaintIDE/MSPaintIDE
Programming in MS Paint
Java · ANTLR★ 1,433Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
quandl/quandl-python
No repository description published.
Python★ 1,430↓ 93.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
dirkjanm/ldapdomaindump
Active Directory information dumper via LDAP
Python★ 1,429Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
50Moderatehealth index
3Hren/msgpack-rust
MessagePack implementation for Rust / msgpack.org[Rust]
Rust★ 1,420↓ 20M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
pympler/pympler
Development tool to measure, monitor and analyze the memory behavior of Python objects in a running Python application.
Python★ 1,412Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
pmndrs/suspend-react
🚥 Async/await for React components
TypeScript · JavaScript★ 1,410↓ 19.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
dbolya/tomesd
Speed up Stable Diffusion with this one simple trick!
Python★ 1,402Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
d3/d3-queue
Evaluate asynchronous tasks with configurable concurrency.
JavaScript★ 1,399↓ 1.4M/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
30At Riskhealth index
AttoJS/vue-request
⚡️ This is a library that can easily help you manage request states, supporting common features such as SWR, polling, error retry, caching, and pagination, etc. ⚡️ 这是一个能够轻松帮助你管理请求状态的库,支持 SWR、轮询、错误重试、缓存、分页等常用功能。
TypeScript★ 1,394↓ 13.9K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0