Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
35,688
Monthly downloads under inspection
378B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,440 recordsRanked by popularity · browse by tag · record statistics
PyPI
41At riskhealth index
godotengine/godot
Godot Engine – Multi-platform 2D and 3D game engine
C++★ 114.4KJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go · npm
38At riskhealth index
MHSanaei/3x-ui
Xray panel supporting multi-protocol multi-user expire day & traffic & IP limit (Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto)
Go · TypeScript★ 43.3KJul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
33At riskhealth index
nolimits4web/swiper
Most modern mobile touch slider with hardware accelerated transitions
TypeScript · JavaScript★ 41.9KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
42At riskhealth index
markedjs/marked
A markdown parser and compiler. Built for speed.
JavaScript · TypeScript · HTML★ 37K↓ 227M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
36At riskhealth index
Dokploy/dokploy
Open Source Alternative to Vercel, Netlify and Heroku.
TypeScript★ 35.9KJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems · crates.io · npm +1
41At riskhealth index
SeleniumHQ/selenium
A browser automation framework and ecosystem.
Java · C# · C++★ 34.3KJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
crates.io · PyPI
36At riskhealth index
qdrant/qdrant
Qdrant - High-performance, massive-scale Vector Database and Vector Search Engine for the next generation of AI. Also available in the cloud https://cloud.qdrant.io/
Rust · Python★ 33.5K↓ 95/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
floating-ui/floating-ui
A JavaScript library to position floating elements and create interactions for them.
TypeScript · MDX · JavaScript★ 32.7KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
38At riskhealth index
labstack/echo
High performance, minimalist Go web framework
Go★ 32.5KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
36At riskhealth index
telegramdesktop/tdesktop
Telegram Desktop messaging app
C++★ 32.4KJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
40At riskhealth index
ReactiveX/rxjs
A reactive programming library for JavaScript
TypeScript★ 31.7K↓ 394M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
tqdm/tqdm
:zap: A Fast, Extensible Progress Bar for Python and CLI
Python · Jupyter Notebook★ 31.2K↓ 593M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
40At riskhealth index
postcss/postcss
Transforming styles with JS plugins
TypeScript · JavaScript★ 29K↓ 1.1B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
56Moderatehealth index
caolan/async
Async utilities for node and the browser
JavaScript★ 28.2K↓ 385M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io · npm
35At riskhealth index
cjpais/Handy
A free, open source, and extensible speech-to-text application that works completely offline.
Rust · TypeScript★ 27KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
36At riskhealth index
ai/nanoid
A tiny (118 bytes), secure, URL-friendly, unique string ID generator for JavaScript
JavaScript★ 26.9K↓ 931M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI · npm · Packagist +2
40At riskhealth index
google/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
C++ · Rust★ 26.2K↓ 120M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Maven · npm
49At riskhealth index
jenkinsci/jenkins
Jenkins automation server
Java★ 25.6KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
cookiecutter/cookiecutter
A cross-platform command-line utility that creates projects from cookiecutters (project templates), e.g. Python package projects, C projects.
Python★ 25K↓ 9.2M/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Go · npm
38At riskhealth index
janDeDobbeleer/oh-my-posh
The most customisable and low-latency cross platform/shell prompt renderer
Go · MDX★ 23.1KJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go · npm
38At riskhealth index
jandedobbeleer/go-my-posh
The most customisable and low-latency cross platform/shell prompt renderer
Go · MDX★ 23.1KJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
36At riskhealth index
micro/go-micro
A Go agent harness and service framework
Go★ 23KJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm · RubyGems
36At riskhealth index
forem/forem
For empowering community 🌱
Ruby · JavaScript · HTML★ 22.8KJul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
slopus/happy
Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured
TypeScript★ 22.7KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
37At riskhealth index
svg/svgo
⚙️ Node.js tool for optimizing SVG files
JavaScript★ 22.6K↓ 140M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
postcss/autoprefixer
Parse CSS and add vendor prefixes to rules by Can I Use
JavaScript · CSS★ 22.3K↓ 249M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
PHPMailer/PHPMailer
The classic email sending library for PHP
PHP★ 22.3K↓ 2.8M/moJul 21, 2026
LGPL-2.1Jul 21, 2026 · metrics 1.13.0
npm
36At riskhealth index
tabler/tabler-icons
A set of over 6000 free MIT-licensed high-quality SVG icons for you to use in your web projects.
JavaScript · TypeScript★ 21.2K↓ 21.9M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Maven · npm · RubyGems
38At riskhealth index
super-productivity/super-productivity
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
TypeScript★ 20.8KJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
PyPI
40At riskhealth index
lightgbm-org/LightGBM
A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
C++ · Python · R★ 18.6KJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0