Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,229
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,271 recordsRanked by popularity · browse by tag · record statistics
—
22At Riskhealth index
patrickmn/go-cache
An in-memory key:value store/cache (similar to Memcached) library for Go, suitable for single-machine applications.
Go★ 8,844Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
19Criticalhealth index
aws/aws-sdk-go
This SDK has reached end-of-support. The AWS SDK for Go v2 is available here: https://github.com/aws/aws-sdk-go-v2
Go★ 8,675Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
kaminari/kaminari
⚡ A Scope & Engine based, clean, powerful, customizable and sophisticated paginator for Ruby webapps
Ruby★ 8,672Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
santinic/audiblez
Generate audiobooks from e-books
Python★ 8,635↓ 1,012/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Hopding/pdf-lib
Create and modify PDF documents in any JavaScript environment
TypeScript★ 8,634↓ 45.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
emilkowalski/vaul
A drawer component for React.
TypeScript★ 8,615↓ 136M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
22At Riskhealth index
hexgrad/kokoro
https://hf.co/hexgrad/Kokoro-82M
JavaScript · Python★ 8,585↓ 1.4M/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · Maven
30At Riskhealth index
DylanVann/react-native-fast-image
🚩 FastImage, performant React Native image component.
TypeScript · Java · Objective-C★ 8,420↓ 558.5K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
29At Riskhealth index
smartystreets/goconvey
Go testing in the browser. Integrates with `go test`. Write behavioral tests in Go.
Go · JavaScript · CSS★ 8,406Sep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
paritytech/substrate
Substrate: The platform for blockchain innovators
Rust★ 8,382↓ 1,672/moOct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
XPixelGroup/BasicSR
Open Source Image and Video Restoration Toolbox for Super-resolution, Denoise, Deblurring, etc. Currently, it includes EDSR, RCAN, SRResNet, SRGAN, ESRGAN, EDVR, BasicVSR, SwinIR, ECBSR, etc. Also support StyleGAN2, DFDNet.
Python★ 8,381Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
53Moderatehealth index
traefik/yaegi
Yaegi is Another Elegant Go Interpreter
Go★ 8,378Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
remix-run/history
Manage session history with JavaScript
JavaScript · TypeScript★ 8,299↓ 44.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
graphql-python/graphene
GraphQL framework for Python
Python★ 8,238↓ 41.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
zilliztech/GPTCache
Semantic cache for LLMs. Fully integrated with LangChain and llama_index.
Python★ 8,192Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
soldair/node-qrcode
qr code generator
JavaScript★ 8,174↓ 85.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
MagicStack/asyncpg
A fast PostgreSQL Database Client Library for Python/asyncio.
Python · Cython★ 8,088Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
php-fig/simple-cache
No repository description published.
PHP★ 8,075↓ 17.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
17Criticalhealth index
mitchellh/mapstructure
Go library for decoding generic map values into native Go structures and vice versa.
Go★ 8,025Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
docopt/docopt
Create *beautiful* command-line interfaces with Python
Python★ 8,005Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
26At Riskhealth index
Masterminds/squirrel
Fluent SQL generation for golang
Go★ 7,986Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
—
29At Riskhealth index
Squirrel/Squirrel.Windows
An installation and update framework for Windows desktop apps
C++ · C#★ 7,980Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
enquirer/enquirer
Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert
JavaScript · SCSS★ 7,947↓ 130M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
puppetlabs/puppet
Server automation framework and application
Ruby★ 7,923Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
juliencrn/usehooks-ts
React hook library, ready to use, written in Typescript.
TypeScript★ 7,857↓ 19.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
doctrine/cache
Doctrine Cache component
PHP★ 7,855↓ 4.8M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
github/scientist
:microscope: A Ruby library for carefully refactoring critical paths.
Ruby★ 7,753Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go · PyPI
62Moderatehealth index
uber-go/fx
A dependency injection based application framework for Go.
Go★ 7,706Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
34At Riskhealth index
styled-components/polished
A lightweight toolset for writing styles in JavaScript ✨
JavaScript★ 7,662↓ 40.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
aws/aws-sdk-js
AWS SDK for JavaScript v2 (End-of-Life as of 09/08/2025). The AWS SDK for JavaScript v3 in the browser and Node.js is available here: https://github.com/aws/aws-sdk-js-v3
JavaScript · Ruby★ 7,603↓ 34.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0