Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,347
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,004 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
bubkoo/html-to-image
✂️ Generates an image from a DOM node using HTML5 canvas and SVG.
TypeScript★ 7,237↓ 22.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
kennethreitz/records
SQL for Humans™
Python★ 7,219↓ 223.3K/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
trentm/node-bunyan
a simple and fast JSON logging module for node.js services
JavaScript · Perl★ 7,208↓ 14.3M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
symfony/debug
Provides tools to ease debugging PHP code
PHP★ 7,171↓ 1.2M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
json5/json5
JSON5 — JSON for Humans
JavaScript★ 7,162↓ 868M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
millsp/ts-toolbelt
👷 TypeScript's largest type utility library
TypeScript★ 7,150↓ 37.4M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
sindresorhus/screenfull
Simple wrapper for cross-browser usage of the JavaScript Fullscreen API
HTML · JavaScript · TypeScript★ 7,139↓ 19.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
jquery/esprima
ECMAScript parsing infrastructure for multipurpose analysis
TypeScript · JavaScript★ 7,138↓ 395M/moSep 16, 2026
BSD-2-ClauseSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
Python · JavaScript★ 7,136Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ianstormtaylor/superstruct
A simple and composable way to validate data in JavaScript (and TypeScript).
TypeScript★ 7,130↓ 23.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/size-limit
Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit.
JavaScript★ 7,036Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
php-fig/http-message
The purpose of this PSR is to provide a set of common interfaces for HTTP messages as described in RFC 7230 and RFC 7231
PHP★ 7,033↓ 21.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
21At Riskhealth index
LasCC/HackTools
The all-in-one browser extension for offensive security professionals 🛠
TypeScript★ 7,026Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
28At Riskhealth index
zenoamaro/react-quill
A Quill component for React.
JavaScript · TypeScript★ 7,006↓ 18.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
flask-restful/flask-restful
Simple framework for creating REST APIs
Python★ 6,915↓ 3.6M/moAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
npm
26At Riskhealth index
matthew-andrews/isomorphic-fetch
Isomorphic WHATWG Fetch API, for Node & Browserify
JavaScript★ 6,905↓ 41.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
chyingp/nodejs-learning-guide
Nodejs学习笔记以及经验总结,公众号"程序猿小卡"
Ruby★ 6,866Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
sqldelight/sqldelight
SQLDelight - Generates typesafe Kotlin APIs from SQL
Kotlin★ 6,865Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
BetterErrors/better_errors
Better error page for Rack apps
Ruby · SCSS · HTML★ 6,862Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
41Weakhealth index
webclipper/web-clipper
For Notion,OneNote,Bear,Yuque,Joplin。Clip anything to anywhere
TypeScript★ 6,850Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
subzeroid/instagrapi
🔥 The fastest and powerful Python library for Instagram Private API 2026 with HikerAPI SaaS
Python★ 6,812↓ 605.3K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
30At Riskhealth index
google/gopacket
Provides packet processing capabilities for Go
Go★ 6,795Sep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm · Packagist
34At Riskhealth index
humhub/humhub
HumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
PHP★ 6,751Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
doctrine/annotations
Annotations Docblock Parser
PHP★ 6,731↓ 6.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
VeNoMouS/cloudscraper
A Python module to bypass Cloudflare's anti-bot page.
Python★ 6,730↓ 4.5M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
Compass/compass
Compass is no longer actively maintained. Compass is a Stylesheet Authoring Environment that makes your website design simpler to implement and easier to maintain.
CSS · Ruby · HTML★ 6,657Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mesonbuild/meson
The Meson Build System
Python · Meson★ 6,615↓ 17.5M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
RubyGems
15Criticalhealth index
kkuchta/css-only-chat
A truly monstrous async web chat using no JS whatsoever on the frontend
Ruby★ 6,592Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytransitions/transitions
A lightweight, object-oriented finite state machine implementation in Python with many extensions
Python★ 6,590↓ 2.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
21At Riskhealth index
busyloop/lolcat
Rainbows and unicorns!
Ruby★ 6,567Aug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0