Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,687
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,303 recordsRanked by popularity · browse by tag · record statistics
PyPI
31At Riskhealth index
python-xlib/python-xlib
XLib in pure Python (Py2/Py3 compatible)
Python★ 463↓ 3.8M/moAug 27, 2026
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
npm
28At Riskhealth index
cst/cst
:herb: JavaScript Concrete Syntax Tree
JavaScript★ 462↓ 115.4K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
probabilistic-numerics/probnum
Probabilistic Numerics in Python.
Python★ 462↓ 291/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
eslint/doctrine
JSDoc parser
JavaScript★ 461↓ 475M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
RubyGems · npm
27At Riskhealth index
hotwired/spark
Hot reloading for Hotwire
JavaScript · Ruby · HTML★ 461Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
—
25At Riskhealth index
esrlabs/git-repo
repo - The multiple repository tool (also works on MS Windows!)
Python★ 460Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
NullHypothesis/exitmap
A fast and modular scanner for Tor exit relays. The canonical repository (including issue tracker) is at https://gitlab.torproject.org/tpo/network-health/exitmap
Python★ 459Sep 20, 2026
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
51Moderatehealth index
AI-Hypercomputer/JetStream
JetStream is a throughput and memory optimized engine for LLM inference on XLA devices, starting with TPUs (and GPUs in future -- PRs welcome).
Python★ 457Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
joshbuddy/jsonpath
Ruby implementation of http://goessner.net/articles/JsonPath/
Ruby★ 456Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
vgalin/html2image
A package acting as a wrapper around the headless mode of existing web browsers to generate images from URLs and from HTML+CSS strings or files.
Python★ 456↓ 356.7K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
27At Riskhealth index
AztecProtocol/aztec-connect
aztec connect repository
TypeScript · Solidity · C++★ 455Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
17Criticalhealth index
rackspace/gophercloud
A Go SDK for OpenStack. IN FEATURE FREEZE. See Issue #592
Go★ 455Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
Hex
35Weakhealth index
safwank/ElixirRetry
Simple Elixir macros for linear retry, exponential backoff and wait with composable delays
Elixir★ 455↓ 171.3K/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
darrenburns/pytest-clarity
A plugin to improve the output of pytest with colourful unified diffs
Python★ 454↓ 594.5K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
22At Riskhealth index
doowb/ansi-colors
Easily add ANSI colors to your text and symbols in the terminal. ansi-colors is the official ansi styling library for gulp. Used by hundreds of projects, including enquirer, vscode, codeql, azure data studio, aws-cdk, redwoodjs, leaflet, mocha, and many others.
JavaScript · TypeScript★ 454↓ 214M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
12Criticalhealth index
dotnet/core-setup
Installer packages for the .NET Core runtime and libraries
Mixed★ 454Oct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
—
18Criticalhealth index
ruzickap/packer-templates
Scripts and Templates used for generating Vagrant images
Shell · PowerShell★ 454Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
s-yadav/iv-viewer
A zooming and panning plugin inspired by google photos for your web images.
JavaScript★ 454↓ 30.3K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
bebanjo/delorean
DISCONTINUED - Delorean lets you travel in time with Ruby by mocking Time.now
Ruby★ 453Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
lurk-lab/lurk-beta
Lurk is a Turing-complete programming language for recursive zk-SNARKs. This is the prior, elliptic curve based variant of Lurk (contact: @porcuquine)
Rust★ 452Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
python-babel/flask-babel
i18n and l10n support for Flask based on Babel and pytz
Python★ 452↓ 8.7M/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
14Criticalhealth index
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
JavaScript★ 451Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
27At Riskhealth index
bruce/node-temp
Temporary File, Directory, and Stream support for Node.js
JavaScript★ 451↓ 44.7M/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Hex
32At Riskhealth index
edgurgel/tentacat
Simple Elixir wrapper for the GitHub API
Elixir★ 451↓ 10.9K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Maven
28At Riskhealth index
restx/restx
RESTX, the lightweight Java REST framework
Java★ 449Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
15Criticalhealth index
devbookhq/splitter
React component for building split views like in VS Code
TypeScript★ 448↓ 63.8K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
25At Riskhealth index
andrewjlamarche/PSKracker
An all-in-one WPA/WPS toolkit
C★ 447Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
bytedance/matxscript
A high-performance, extensible Python AOT compiler.
C++ · Python★ 447Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
d2iq-archive/marathon-lb
Marathon-lb is a service discovery & load balancing tool for DC/OS
Python★ 447Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
18Criticalhealth index
goreleaser/godownloader
[DEPRECATED] Download Go binaries as fast and easily as possible.
Go★ 447Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0