Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,285
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,927 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
Chocobozzz/PeerTube
ActivityPub-federated video streaming platform using P2P directly in your web browser
TypeScript★ 15.3KSep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
albumentations-team/albumentations
Fast and flexible image augmentation library. Paper about the library: https://www.mdpi.com/2078-2489/11/2/125
Python★ 15.3KSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go · npm
60Moderatehealth index
loft-sh/devpod
Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker.
Go · TypeScript★ 15.2KSep 19, 2026
MPL-2.0Sep 19, 2026 · metrics 2.10.0
PyPI · npm · Go +2
26At Riskhealth index
alphacep/vosk-api
Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node
Jupyter Notebook★ 15.1K↓ 758.4K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
43Weakhealth index
erusev/parsedown
Better Markdown Parser in PHP
PHP · HTML★ 15.1K↓ 1.8M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
16Criticalhealth index
kriskowal/q
A promise library for JavaScript
JavaScript★ 15K↓ 50.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
sympy/sympy
A computer algebra system written in pure Python
Python★ 14.9KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
sindresorhus/got
🌐 Human-friendly and powerful HTTP request library for Node.js
TypeScript★ 14.9K↓ 145M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
mamoe/mirai
高效率 QQ 机器人支持库
Kotlin★ 14.8KSep 18, 2026
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
aleju/imgaug
Image augmentation for machine learning experiments.
Python★ 14.7K↓ 370.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
bulletphysics/bullet3
Bullet Physics SDK: real-time collision detection and multi-physics simulation for VR, games, visual effects, robotics, machine learning etc.
C++ · C★ 14.7K↓ 468.9K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nltk/nltk
NLTK Source
Python★ 14.7KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
—
16Criticalhealth index
boltdb/bolt
An embedded key/value database for Go.
Go★ 14.6KSep 30, 2026
MITSep 30, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
neutraltone/awesome-stock-resources
:city_sunrise: A collection of links for free stock photography, video and Illustration websites
Ruby★ 14.5KAug 27, 2026
CC0-1.0Aug 27, 2026 · metrics 2.10.0
Go
19Criticalhealth index
google/wire
Compile-time Dependency Injection for Go
Go★ 14.4KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
gollum/gollum
A simple, Git-powered wiki with a local frontend and support for many kinds of markup and content.
Ruby · JavaScript★ 14.3KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
yiisoft/yii2
Yii 2: The Fast, Secure and Professional PHP Framework
PHP★ 14.3K↓ 505.3K/moAug 27, 2026
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
spotify/annoy
Approximate Nearest Neighbors in C++/Python optimized for memory usage and loading/saving to disk
C++ · Python · Lua★ 14.3K↓ 1.3M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
55Moderatehealth index
deeplearning4j/deeplearning4j
Suite of tools for deploying and training deep learning models using the JVM. Highlights include model import for keras, tensorflow, and onnx/pytorch, a modular and tiny c++ library for running math code and a java based math library on top of the core c++ library. Also includes samediff: a pytorch/tensorflow like library for running deep learn...
Java · C++★ 14.2KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
65Goodhealth index
http-party/http-server
A simple, zero-configuration, command-line http server
JavaScript★ 14.2K↓ 27.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
21At Riskhealth index
robfig/cron
a cron library for go
Go★ 14.2KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
http-party/node-http-proxy
A full-featured http proxy for node.js
JavaScript★ 14.1K↓ 94.6M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
sivel/speedtest-cli
Command line interface for testing internet bandwidth using speedtest.net
Python★ 14.1K↓ 280.9K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
google/yapf
A formatter for Python files
Python★ 14K↓ 9.1M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
sqshq/piggymetrics
Microservice Architecture with Spring Boot, Spring Cloud and Docker
Java · CSS · JavaScript★ 13.9KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
17Criticalhealth index
json-iterator/go
A high-performance 100% compatible drop-in replacement of "encoding/json"
Go★ 13.9KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
rabbitmq/rabbitmq-server
Open source RabbitMQ: core server and tier 1 (built-in) plugins
JavaScript · Shell★ 13.8KAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
microsoft/LoRA
Code for loralib, an implementation of "LoRA: Low-Rank Adaptation of Large Language Models"
Python★ 13.8K↓ 217.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
16Criticalhealth index
seaswalker/spring-analysis
Spring源码阅读
Java★ 13.7KAug 27, 2026
No licenseAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/browserslist
🦔 Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-preset-env
JavaScript★ 13.6K↓ 726M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0