Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,364
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,284 recordsRanked by popularity · browse by tag · record statistics
npm
31At Riskhealth index
handshake-org/hsd
Handshake Daemon & Full Node
JavaScript★ 2,073↓ 1,578/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
konradhalas/dacite
Simple creation of data classes from dictionaries.
Python★ 2,068↓ 21.3M/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
29At Riskhealth index
taylorhakes/fecha
Lightweight and simple JS date formatting and parsing
JavaScript · TypeScript★ 2,067↓ 95.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
sybrenjansen/mpire
A Python package for easy multiprocessing, but faster than multiprocessing
Python★ 2,064↓ 3.8M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
fugue/credstash
A little utility for managing credentials in the cloud
Python★ 2,063Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
Behat/Transliterator
Behat Transliterator library inherited from Doctrine1 and used in Behat for snippet generation
PHP★ 2,060↓ 1.4M/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
Go
33At Riskhealth index
pkg/profile
Simple profiling for Go
Go★ 2,058Sep 23, 2026
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
npm
28At Riskhealth index
epoberezkin/fast-deep-equal
The fastest deep equality check with Date, RegExp and ES6 Map, Set and typed arrays support
JavaScript★ 2,048↓ 767M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rails/arel
A Relational Algebra
Ruby★ 2,048Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
airsonic/airsonic
:satellite: :cloud: :notes:Airsonic, a Free and Open Source community driven media server (fork of Subsonic and Libresonic)
Java · JavaScript★ 2,046Sep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
JazzCore/python-pdfkit
Wkhtmltopdf python wrapper to convert html to pdf
Python★ 2,045↓ 4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nidhaloff/deep-translator
A flexible free and unlimited python tool to translate between different languages in a simple way using multiple translators.
Python★ 2,043Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
RedisGraph/RedisGraph
A graph database as a Redis module
C · Gherkin · Python★ 2,041Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
matthiasmullie/minify
CSS & JavaScript minifier, in PHP. Removes whitespace, strips comments, combines files (incl. @import statements and small assets in CSS files), and optimizes/shortens a few common programming patterns.
PHP · JavaScript★ 2,041↓ 1M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · PyPI
19Criticalhealth index
KudoAI/chatgpt.js
🤖 A powerful, lightweight JavaScript library + interactive CLI for ChatGPT
JavaScript★ 2,038Sep 29, 2026
No licenseSep 29, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-lang-nursery/lazy-static.rs
A small macro for defining lazy evaluated static variables in Rust.
Rust★ 2,034↓ 60.6M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
13Criticalhealth index
pimusicbox/pimusicbox
An image (SD-card) to turn the Raspberry Pi into an easy to use MusicBox with Spotify playback and AirTunes streaming
Shell★ 2,032Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
55Moderatehealth index
expressjs/cookie-parser
Parse HTTP request cookies
JavaScript★ 2,030↓ 43M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
zspecza/common-tags
🔖 Useful template literal tags for dealing with strings in ES2015+
JavaScript★ 2,025↓ 90M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
xlang-ai/instructor-embedding
[ACL 2023] One Embedder, Any Task: Instruction-Finetuned Text Embeddings
Python★ 2,024Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
attr-encrypted/attr_encrypted
Generates attr_accessors that encrypt and decrypt attributes
Ruby★ 2,018Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
51Moderatehealth index
brack3t/django-braces
Reusable, generic mixins for Django
Python★ 2,016↓ 292.6K/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
softonic/axios-retry
Axios plugin that intercepts failed requests and retries them whenever possible
TypeScript★ 2,014↓ 34.3M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
rubik/radon
Various code metrics for Python code
Python★ 2,010↓ 5.9M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
crates.io · npm
19Criticalhealth index
AppFlowy-IO/AppFlowy-Cloud
Bring projects, wikis, and teams together with AI. AppFlowy is the AI collaborative workspace where you achieve more without losing control of your data. The leading open source Notion alternative.
Rust★ 2,004Sep 13, 2026
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
npm
26At Riskhealth index
SGrondin/bottleneck
Job scheduler and rate limiter, supports Clustering
JavaScript★ 2,003↓ 45.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ionic-team/ionic-cli
The Ionic command-line interface
TypeScript★ 2,002Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
d3/d3-force
Force-directed graph layout using velocity Verlet integration.
JavaScript★ 2,001↓ 80.3M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
TypeStrong/fork-ts-checker-webpack-plugin
Webpack plugin that runs typescript type checker on a separate process.
TypeScript★ 1,998↓ 82.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0