Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,528
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,335 recordsRanked by popularity · browse by tag · record statistics
npm
55Moderatehealth index
jaredpalmer/formik
Build forms in React, without the tears 😭
TypeScript★ 34.3K↓ 14/moAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
xkcoding/spring-boot-demo
🚀一个用来深入学习并实战 Spring Boot 的项目。
Java★ 34.1KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
PyPI
46Weakhealth index
MetaCubeX/mihomo
A simple Python Pydantic model for Honkai: Star Rail parsed data from the Mihomo API.
Python★ 32.9KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
open-mmlab/mmdetection
OpenMMLab Detection Toolbox and Benchmark
Python★ 32.9KAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
airbnb/lottie-web
Render After Effects animations natively on Web, Android and iOS, and React Native. http://airbnb.io/lottie/
JavaScript★ 32K↓ 28.6M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
niklasvh/html2canvas
Screenshots with JavaScript
TypeScript · HTML · JavaScript★ 31.9K↓ 65.6M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
JaidedAI/EasyOCR
Ready-to-use OCR with 80+ supported languages and all popular writing scripts including Latin, Chinese, Arabic, Devanagari, Cyrillic and etc.
Python · C++★ 29.9KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm · Packagist
34At Riskhealth index
foundation/foundation-sites
The most advanced responsive front-end framework in the world. Quickly create prototypes and production code for sites that work on any kind of device.
HTML · SCSS · JavaScript★ 29.8K↓ 439.7K/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss
Transforming styles with JS plugins
TypeScript · JavaScript★ 29K↓ 1.1B/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
62Moderatehealth index
caolan/async
Async utilities for node and the browser
JavaScript★ 28.1K↓ 389M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
19Criticalhealth index
codemirror/codemirror5
In-browser code editor (version 5, legacy)
JavaScript · HTML★ 27.2KAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/nanoid
A tiny (118 bytes), secure, URL-friendly, unique string ID generator for JavaScript
JavaScript★ 26.9K↓ 922M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
crossoverJie/JCSprout
👨‍🎓 Java Core Sprout : basic, concurrent, algorithm
Java★ 26.9KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
fzaninotto/Faker
Faker is a PHP library that generates fake data for you
PHP★ 26.7K↓ 807.7K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
qiurunze123/miaosha
⭐⭐⭐⭐秒杀系统设计与实现.互联网工程师进阶与分析🙋🐓
Java★ 26.6KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
PyPI · npm
19Criticalhealth index
facebookresearch/fastText
Library for fast text representation and classification.
HTML · C++ · JavaScript★ 26.5KAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
jenkinsci/jenkins
Jenkins automation server
Java★ 26.4KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
26At Riskhealth index
rstacruz/nprogress
For slim progress bars like on YouTube, Medium, etc
JavaScript · HTML · CSS★ 26.4K↓ 14.1M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm · Packagist · Maven +2
34At Riskhealth index
google/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
C++ · Rust★ 26.3K↓ 31M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
JakeChampion/fetch
A window.fetch JavaScript polyfill.
JavaScript★ 25.9KAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
localForage/localForage
💾 Offline storage, improved. Wraps IndexedDB, WebSQL, or localStorage using a simple but powerful API.
JavaScript★ 25.8K↓ 33.2M/moAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
alibaba/fastjson
FASTJSON 2.0.x has been released, faster and more secure, recommend you upgrade.
Java★ 25.6KAug 26, 2026
Apache-2.0Aug 26, 2026 · metrics 2.10.0
npm
19Criticalhealth index
request/request
🏊🏾 Simplified HTTP request client.
JavaScript★ 25.5K↓ 60.2M/moAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
cookiecutter/cookiecutter
A cross-platform command-line utility that creates projects from cookiecutters (project templates), e.g. Python package projects, C projects.
Python★ 25KAug 5, 2026
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
highlightjs/highlight.js
JavaScript syntax highlighter with language auto-detection and zero dependencies.
JavaScript · CSS★ 25K↓ 120M/moAug 12, 2026
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
Go
32At Riskhealth index
gorilla/websocket
Package gorilla/websocket is a fast, well-tested and widely used WebSocket implementation for Go.
Go★ 24.8KAug 5, 2026
BSD-2-ClauseAug 5, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
vanna-ai/vanna
🤖 Chat with your SQL database 📊. Accurate Text-to-SQL Generation via LLMs using Agentic Retrieval 🔄.
Python · TypeScript★ 23.8K↓ 223.2K/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
EnterpriseQualityCoding/FizzBuzzEnterpriseEdition
FizzBuzz Enterprise Edition is a no-nonsense implementation of FizzBuzz made by serious businessmen for serious business purposes.
Java★ 23.8KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
npm
59Moderatehealth index
jquense/yup
Dead simple Object schema validation
TypeScript★ 23.7K↓ 50.2M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
30At Riskhealth index
jaredhanson/passport
Simple, unobtrusive authentication for Node.js.
JavaScript★ 23.5K↓ 31.5M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0