Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,421
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,236 recordsRanked by popularity · browse by tag · record statistics
PyPI
19Criticalhealth index
seatgeek/fuzzywuzzy
Fuzzy String Matching in Python
Python★ 9,251Aug 28, 2026
GPL-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
imathis/octopress
Octopress is an obsessively designed framework for Jekyll blogging. It’s easy to configure and easy to deploy. Sweet huh?
Ruby · CSS · JavaScript★ 9,235Aug 28, 2026
No licenseAug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
node-schedule/node-schedule
A cron-like and not-cron-like job scheduler for Node.
JavaScript★ 9,205↓ 19.1M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
30At Riskhealth index
olivernn/lunr.js
A bit like Solr, but much smaller and not as bright
JavaScript★ 9,200↓ 27.9M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
FriendsOfPHP/Goutte
Goutte, a simple PHP Web Scraper
PHP★ 9,192↓ 232.7K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mrdoob/stats.js
JavaScript Performance Monitor
JavaScript★ 9,143↓ 15.7M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
thoughtbot/bourbon
A Lightweight Sass Tool Set
Ruby★ 9,004↓ 741.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
59Moderatehealth index
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
JavaScript★ 8,983↓ 15M/moAug 12, 2026
BSD-2-ClauseAug 12, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
pygame/pygame
🐍🎮 pygame (the library) is a Free and Open Source python programming language library for making multimedia applications like games built on top of the excellent SDL library. C, Python, Native, OpenGL.
C · Python★ 8,907Aug 28, 2026
No licenseAug 28, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Python★ 8,864Aug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
JavaScript★ 8,855↓ 716M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
22At Riskhealth index
patrickmn/go-cache
An in-memory key:value store/cache (similar to Memcached) library for Go, suitable for single-machine applications.
Go★ 8,844Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
19Criticalhealth index
aws/aws-sdk-go
This SDK has reached end-of-support. The AWS SDK for Go v2 is available here: https://github.com/aws/aws-sdk-go-v2
Go★ 8,675Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
kaminari/kaminari
⚡ A Scope & Engine based, clean, powerful, customizable and sophisticated paginator for Ruby webapps
Ruby★ 8,672Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI · npm
22At Riskhealth index
hexgrad/kokoro
https://hf.co/hexgrad/Kokoro-82M
JavaScript · Python★ 8,585↓ 1.4M/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Hopding/pdf-lib
Create and modify PDF documents in any JavaScript environment
TypeScript★ 8,580↓ 41.7M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
48Weakhealth index
emilkowalski/vaul
A drawer component for React.
TypeScript★ 8,553↓ 155M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
paritytech/substrate
Substrate: The platform for blockchain innovators
Rust★ 8,397↓ 1,728/moSep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
53Moderatehealth index
traefik/yaegi
Yaegi is Another Elegant Go Interpreter
Go★ 8,378Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
XPixelGroup/BasicSR
Open Source Image and Video Restoration Toolbox for Super-resolution, Denoise, Deblurring, etc. Currently, it includes EDSR, RCAN, SRResNet, SRGAN, ESRGAN, EDVR, BasicVSR, SwinIR, ECBSR, etc. Also support StyleGAN2, DFDNet.
Python★ 8,365Aug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
remix-run/history
Manage session history with JavaScript
JavaScript · TypeScript★ 8,303↓ 46M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
graphql-python/graphene
GraphQL framework for Python
Python★ 8,238↓ 41.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
26At Riskhealth index
soldair/node-qrcode
qr code generator
JavaScript★ 8,160↓ 82M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
zilliztech/GPTCache
Semantic cache for LLMs. Fully integrated with LangChain and llama_index.
Python★ 8,130Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
php-fig/simple-cache
No repository description published.
PHP★ 8,075↓ 17.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
17Criticalhealth index
mitchellh/mapstructure
Go library for decoding generic map values into native Go structures and vice versa.
Go★ 8,025Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
docopt/docopt
Create *beautiful* command-line interfaces with Python
Python★ 8,009Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
29At Riskhealth index
Squirrel/Squirrel.Windows
An installation and update framework for Windows desktop apps
C++ · C#★ 7,980Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
26At Riskhealth index
Masterminds/squirrel
Fluent SQL generation for golang
Go★ 7,976Aug 21, 2026
Custom licenseAug 21, 2026 · metrics 2.10.0
npm
34At Riskhealth index
enquirer/enquirer
Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert
JavaScript · SCSS★ 7,951↓ 133M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0