Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,704
Monthly downloads under inspection
584B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,964 recordsRanked by popularity · browse by tag · record statistics
npm
27At Riskhealth index
prettymuchbryce/http-status-codes
Constants enumerating the HTTP status codes. All status codes defined in RFC1945 (HTTP/1.0, RFC2616 (HTTP/1.1), and RFC2518 (WebDAV) are supported.
TypeScript★ 1,122↓ 38.2M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
jquery-ui-rails/jquery-ui-rails
jQuery UI for the Rails asset pipeline
Ruby · CSS · HTML★ 1,120Aug 21, 2026
Custom licenseAug 21, 2026 · metrics 2.10.0
Packagist
43Weakhealth index
renoki-co/laravel-eloquent-query-cache
Adding cache on your Laravel Eloquent queries' results is now a breeze.
PHP★ 1,119↓ 87.9K/moSep 8, 2026
Apache-2.0Sep 8, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
PyCQA/pydocstyle
docstring style checker
Python★ 1,116↓ 4.7M/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
c4urself/bump2version
Version-bump your software with a single command
Python★ 1,115↓ 1.6M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
fengsp/color-thief-py
Grabs the dominant color or a representative color palette from an image. Uses Python and Pillow.
Python★ 1,115↓ 488.6K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
moneta-rb/moneta
a unified interface to key/value stores
Ruby★ 1,115Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
aave/aave-v3-core
This repository contains the core smart contracts of the Aave V3 protocol.
TypeScript · Solidity★ 1,113↓ 13K/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
19Criticalhealth index
matrix-org/matrix-react-sdk
Matrix SDK for React Javascript
TypeScript★ 1,109Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
Go
36Weakhealth index
edsrzf/mmap-go
A portable mmap package for Go
Go★ 1,106Aug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
crates.io · npm
19Criticalhealth index
holochain/holochain-rust
DEPRECATED. The Holochain framework implemented in rust with a redux style internal state-model.
Rust★ 1,105↓ 499/moJul 28, 2026
GPL-3.0Jul 28, 2026 · metrics 2.10.0
npm · crates.io
57Moderatehealth index
wasmerio/wasmer-js
Monorepo for Javascript WebAssembly packages by Wasmer
Rust · TypeScript★ 1,101↓ 133.6K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
npm
31At Riskhealth index
d3/d3-geo
Geographic projections, spherical shapes and spherical trigonometry.
JavaScript★ 1,099↓ 99.5M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
man-c/pycoingecko
Python wrapper for the CoinGecko API
Python★ 1,098Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Grokzen/redis-py-cluster
Python cluster client for the official redis cluster. Redis 3.0+.
Python · Ruby★ 1,095Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
floere/phony
E164 international phone number normalizing, splitting, formatting.
Ruby★ 1,095Aug 20, 2026
MITAug 20, 2026 · metrics 2.10.0
Go
34At Riskhealth index
werf/nelm
Nelm is a Helm 4 alternative. It is a Kubernetes deployment tool that manages Helm Charts and deploys them to Kubernetes. The Nelm goal is to provide a modern alternative to Helm, with long-standing issues fixed and many new major features introduced.
Go★ 1,094Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
crates.io
27At Riskhealth index
BurntSushi/byteorder
Rust library for reading/writing numbers in big-endian and little-endian.
Rust★ 1,093↓ 46.3M/moAug 3, 2026
UnlicenseAug 3, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
c0fec0de/anytree
Python tree data library
Python★ 1,091↓ 6.7M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
dtolnay/paste
Macros for all your token pasting needs
Rust★ 1,090↓ 29.9M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
npm
16Criticalhealth index
request/request-promise-native
The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.
JavaScript★ 1,088↓ 13M/moAug 2, 2026
ISCAug 2, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
chrisk/fakeweb
Ruby test helper for injecting fake responses to web requests
Ruby★ 1,087Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
BrainMaestro/composer-git-hooks
Easily manage git hooks in your composer config
PHP★ 1,085↓ 226.5K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
peterbe/premailer
Turns CSS blocks into style attributes
Python★ 1,085Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0
Go
23At Riskhealth index
KyleBanks/depth
Visualize Go Dependency Trees
Go★ 1,083Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
csurfer/rake-nltk
Python implementation of the Rapid Automatic Keyword Extraction algorithm using NLTK.
Python★ 1,083↓ 273.5K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
opentracing/opentracing-javascript
OpenTracing API for Javascript (both Node and browser). 🛑 This library is DEPRECATED! https://github.com/opentracing/specification/issues/163
TypeScript★ 1,083↓ 30.1M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Hex
19Criticalhealth index
googleapis/elixir-google-api
Elixir client libraries for accessing Google APIs.
Elixir★ 1,081↓ 6,431/moSep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0