Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,627
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,370 recordsRanked by popularity · browse by tag · record statistics
PyPI
48Weakhealth index
python-openxml/python-docx
Create and modify Word documents with Python
Python★ 5,693↓ 109M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
NuGet · PyPI
34At Riskhealth index
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
C#★ 5,686Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
mislav/will_paginate
Pagination library for Rails and other Ruby applications
Ruby★ 5,684Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
28At Riskhealth index
gogo/protobuf
[Deprecated] Protocol Buffers for Go with Gadgets
Go★ 5,664Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm · Maven
29At Riskhealth index
crazycodeboy/react-native-splash-screen
A splash screen for react-native, hide when application loaded ,it works on iOS and Android.
Java · Objective-C★ 5,658↓ 341.9K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
18Criticalhealth index
assaf/zombie
Insanely fast, full-stack, headless browser testing using node.js
JavaScript★ 5,627↓ 40.3K/moAug 9, 2026
MITAug 9, 2026 · metrics 2.10.0
Go
26At Riskhealth index
russross/blackfriday
Blackfriday: a markdown processor for Go
Go★ 5,606Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
PaulLeCam/react-leaflet
React components for Leaflet maps
TypeScript★ 5,596↓ 28.5M/moAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
PyPI · RubyGems
34At Riskhealth index
google/clusterfuzz
Scalable fuzzing infrastructure.
Python★ 5,595↓ 6,886/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
31At Riskhealth index
lukeed/polka
A micro web server so fast, it'll make you dance! :dancers:
JavaScript★ 5,587↓ 130M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
28At Riskhealth index
kelseyhightower/envconfig
Golang library for managing configuration data from environment variables
Go★ 5,464Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
rails-api/active_model_serializers
ActiveModel::Serializer implementation and Rails hooks
Ruby★ 5,341Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
euske/pdfminer
Python PDF Parser (Not actively maintained). Check out pdfminer.six.
Python★ 5,274Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
rails/webpacker
Use Webpack to manage app-like JavaScript modules in Rails
Ruby · JavaScript★ 5,272↓ 744K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
nikic/FastRoute
Fast request router for PHP
PHP★ 5,267↓ 2M/moAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
Go
32At Riskhealth index
segmentio/ksuid
K-Sortable Globally Unique IDs
Go★ 5,266Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm
34At Riskhealth index
testing-library/react-hooks-testing-library
🐏 Simple and complete React hooks testing utilities that encourage good testing practices.
TypeScript★ 5,262↓ 11.6M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
27At Riskhealth index
bgrins/TinyColor
Fast, small color manipulation and conversion for JavaScript
JavaScript★ 5,247↓ 54.4M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
pypa/sampleproject
A sample project that exists for PyPUG's "Tutorial on Packaging and Distributing Projects"
Python★ 5,245↓ 488K/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
16Criticalhealth index
standard-things/esm
Tomorrow's ECMAScript modules today!
JavaScript★ 5,242Aug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rest-client/rest-client
Simple HTTP and REST client for Ruby, inspired by microframework syntax for specifying actions.
Ruby★ 5,212Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet
32At Riskhealth index
JoshClose/CsvHelper
Library to help reading and writing CSV files
C# · CSS★ 5,209Aug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
28At Riskhealth index
Marak/colors.js
get colors in your node.js console
JavaScript★ 5,167↓ 108M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rails-api/rails-api
Rails for API only applications
Ruby★ 5,129Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
vmg/redcarpet
The safe Markdown parser, reloaded.
C · HTML · Ruby★ 5,079Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
Lyken17/pytorch-OpCounter
Count the MACs / FLOPs of your PyTorch model.
Python★ 5,078↓ 887K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
19Criticalhealth index
hashicorp/terraform-cdk
Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
TypeScript★ 5,075↓ 2.1M/moAug 12, 2026
MPL-2.0Aug 12, 2026 · metrics 2.10.0
npm · Maven
29At Riskhealth index
itinance/react-native-fs
Native filesystem access for react-native
C++ · C# · Objective-C★ 5,043↓ 2.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
kangax/html-minifier
Javascript-based HTML compressor/minifier (with Node.js support)
JavaScript★ 5,038↓ 12.8M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0