Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,721
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,374 recordsRanked by popularity · browse by tag · record statistics
PyPI
26At Riskhealth index
rlabbe/filterpy
Python Kalman filtering and optimal estimation library. Implements Kalman filter, particle filter, Extended Kalman filter, Unscented Kalman filter, g-h (alpha-beta), least squares, H Infinity, smoothers, and more. Has companion book 'Kalman and Bayesian Filters in Python'.
Python★ 3,858Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
59Moderatehealth index
canvg/canvg
JavaScript SVG parser and renderer on Canvas
TypeScript · JavaScript★ 3,835↓ 49.5M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
facebook/regenerator
Source transformer enabling ECMAScript 6 generator functions in JavaScript-of-today.
JavaScript★ 3,826↓ 758.7K/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
FactoryBoy/factory_boy
A test fixtures replacement for Python
Python★ 3,805↓ 23.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
8Criticalhealth index
lazychaser/laravel-nestedset
Effective tree structures in Laravel 4-8
PHP★ 3,804↓ 352.9K/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
nalepae/pandarallel
A simple and efficient tool to parallelize Pandas operations on all available CPUs
Python★ 3,801Aug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
css/csso
CSS minifier with structural optimizations
JavaScript · CSS★ 3,787↓ 117M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm · Maven
34At Riskhealth index
JetBrains/ring-ui
A collection of JetBrains Web UI components
TypeScript · CSS★ 3,784↓ 52.8K/moAug 2, 2026
Apache-2.0Aug 2, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
ralouphie/getallheaders
PHP getallheaders polyfill
PHP★ 3,778↓ 20.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Go
30At Riskhealth index
go-gorp/gorp
Go Relational Persistence - an ORM-ish library for Go
Go★ 3,747Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
solnic/virtus
[DISCONTINUED ] Attributes on Steroids for Plain Old Ruby Objects
Ruby★ 3,746Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
flasgger/flasgger
Easy OpenAPI specs and Swagger UI for your Flask API
Python · JavaScript · HTML★ 3,742Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
npm
27At Riskhealth index
kach/nearley
📜🔜🌲 Simple, fast, powerful parser toolkit for JavaScript.
JavaScript · HTML★ 3,741Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
GeneralMills/pytrends
Pseudo API for Google Trends
Python★ 3,731Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
12Criticalhealth index
GodotSteam/GodotSteam
An ecosystem of tools for Godot Engine and Valve's Steam. For Linux, Mac, and Windows.
Mixed★ 3,726Jul 24, 2026
No licenseJul 24, 2026 · metrics 2.10.0
37Weakhealth index
TheNetAdmin/zjuthesis
Zhejiang University Graduation Thesis LaTeX Template
TeX · Shell★ 3,726Aug 10, 2026
MITAug 10, 2026 · metrics 2.10.0
npm
34At Riskhealth index
jellyfin/jellyfin-web
The Free Software Media System - Official Web Client
JavaScript · TypeScript · SCSS★ 3,724↓ 66/moJul 25, 2026
GPL-2.0Jul 25, 2026 · metrics 2.10.0
NuGet
31At Riskhealth index
StephenCleary/AsyncEx
A helper library for async/await.
C#★ 3,723Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
19Criticalhealth index
blackmagic-debug/blackmagic
In-application debugger for ARM Cortex and RISC-V processors.
Mixed★ 3,722Jul 17, 2026
GPL-3.0Jul 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
microcosm-cc/bluemonday
bluemonday: a fast golang HTML sanitizer (inspired by the OWASP Java HTML Sanitizer) to scrub user generated content of XSS
Go★ 3,704Jul 30, 2026
BSD-3-ClauseJul 30, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
maxcountryman/flask-login
Flask user session management.
Python★ 3,675↓ 25.8M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
sds/scss-lint
Configurable tool for writing clean, consistent SCSS
Ruby★ 3,672Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
seatgeek/thefuzz
Fuzzy String Matching in Python
Python★ 3,645↓ 10.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
17Criticalhealth index
yandex/odyssey
Scalable PostgreSQL connection pooler
C★ 3,612Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
23At Riskhealth index
mathiasbynens/he
A robust HTML entity encoder/decoder written in JavaScript.
JavaScript★ 3,600↓ 162M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
14Criticalhealth index
tildeio/rsvp.js
A lightweight library that provides tools for organizing asynchronous code
JavaScript★ 3,597↓ 24.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pytorch/text
Models, data loaders and abstractions for language processing, powered by PyTorch
Python · C++★ 3,554Aug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
andywer/threads.js
🧵 Make web workers & worker threads as simple as a function call.
TypeScript★ 3,532↓ 3.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
34At Riskhealth index
tensorflow/hub
A library for transfer learning by reusing parts of TensorFlow models.
Python★ 3,522Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Suor/funcy
A fancy and practical functional tools
Python★ 3,509Aug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0