Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,139
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,961 recordsRanked by popularity · browse by tag · record statistics
Maven
60Moderatehealth index
antlr/antlr4
ANTLR (ANother Tool for Language Recognition) is a powerful parser generator for reading, processing, executing, or translating structured text or binary files.
Java · C++ · C#★ 19KSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
dianping/cat
CAT 作为服务端项目基础组件,提供了 Java, C/C++, Node.js, Python, Go 等多语言客户端,已经在美团点评的基础架构中间件框架(MVC框架,RPC框架,数据库框架,缓存框架等,消息队列,配置系统等)深度集成,为美团点评各业务线提供系统丰富的性能指标、健康状况、实时告警等。
Java★ 18.9KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
lightgbm-org/LightGBM
A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
C++ · Python · R★ 18.8K↓ 19.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
framework7io/framework7
Full featured HTML framework for building iOS & Android apps
JavaScript · Vue · Svelte★ 18.8KSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
27At Riskhealth index
jmoiron/sqlx
general purpose extensions to golang's database/sql
Go★ 17.7KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
14Criticalhealth index
npm/npm
This repository is moving to: https://github.com/npm/cli
Mixed★ 17.6KSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
justauth/JustAuth
🏆Gitee 最有价值开源项目 🚀:100: 小而全而美的第三方登录开源组件。目前已支持Github、Gitee、微博、钉钉、百度、Coding、腾讯云开发者平台、OSChina、支付宝、QQ、微信、淘宝、Google、Facebook、抖音、领英、小米、微软、今日头条、Teambition、StackOverflow、Pinterest、人人、华为、企业微信、酷家乐、Gitlab、美团、饿了么、推特、飞书、京东、阿里云、喜马拉雅、Amazon、Slack和 Line 等第三方平台的授权登录。 Login, so easy!
Java★ 17.5KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
15Criticalhealth index
dotnet/corefx
This repo is used for servicing PR's for .NET Core 2.1 and 3.1. Please visit us at https://github.com/dotnet/runtime
Mixed★ 17.5KSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Go
27At Riskhealth index
emirpasic/gods
GoDS (Go Data Structures) - Sets, Lists, Stacks, Maps, Trees, Queues, and much more
Go★ 17.5KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
nfl/react-helmet
A document head manager for React
JavaScript★ 17.5K↓ 13M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
QwenLM/Qwen-Agent
Agent framework and applications built upon Qwen>=3.0, featuring Function Calling, MCP, Code Interpreter, RAG, Chrome extension, etc.
Python★ 17.1K↓ 175.6K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
less/less.js
Less. The dynamic stylesheet language.
JavaScript · Less★ 17K↓ 40.8M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
cvat-ai/cvat
Computer Vision Annotation Tool (CVAT) is a leading platform for building high-quality visual datasets for vision AI. It offers open-source, cloud, and enterprise products, as well as labeling services, for image, video, and 3D annotation with AI-assisted labeling, quality assurance, team collaboration, analytics, and developer APIs.
Python · TypeScript · JavaScript★ 16.7K↓ 86K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
janl/mustache.js
Minimal templating with {{mustaches}} in JavaScript
JavaScript★ 16.7K↓ 66.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
clap-rs/clap
A full featured, fast Command Line Argument Parser for Rust
Rust★ 16.7K↓ 280M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
shuzheng/zheng
基于Spring+SpringMVC+Mybatis分布式敏捷开发系统架构,提供整套公共微服务服务模块:集中权限管理(单点登录)、内容管理、支付中心、用户管理(支持第三方登录)、微信平台、存储系统、配置中心、日志分析、任务和通知等,支持服务治理、监控和追踪,努力为中小型企业打造全方位J2EE企业级开发解决方案。
Java · CSS★ 16.6KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
JeffLi1993/springboot-learning-example
spring boot 实践学习案例,是 spring boot 初学者及核心技术巩固的最佳实践。
Java · HTML★ 16.6KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aio-libs/aiohttp
Asynchronous HTTP client/server framework for asyncio and Python
Python★ 16.5K↓ 493M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
piskvorky/gensim
Topic Modelling for Humans
Python★ 16.5KSep 16, 2026
LGPL-2.1Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
steven-tey/novel
Notion-style WYSIWYG editor with AI-powered autocompletion.
TypeScript★ 16.4K↓ 301.6K/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
15Criticalhealth index
brix/crypto-js
JavaScript library of crypto standards.
JavaScript★ 16.4K↓ 72.2M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
treeverse/dvc
🦉 Data Versioning and ML Experiments
Python★ 15.9K↓ 2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Maven
16Criticalhealth index
dyc87112/SpringBoot-Learning
《Spring Boot基础教程》,2.x版本持续连载中!点击下方链接直达教程目录!
Java · HTML★ 15.7KSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
66Goodhealth index
encode/httpx
A next generation HTTP client for Python. 🦋
Python★ 15.5K↓ 656M/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
exceljs/exceljs
Excel Workbook Manager
JavaScript★ 15.5K↓ 53.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Chocobozzz/PeerTube
ActivityPub-federated video streaming platform using P2P directly in your web browser
TypeScript★ 15.3KSep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
albumentations-team/albumentations
Fast and flexible image augmentation library. Paper about the library: https://www.mdpi.com/2078-2489/11/2/125
Python★ 15.3KSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go · npm
60Moderatehealth index
loft-sh/devpod
Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker.
Go · TypeScript★ 15.2KSep 19, 2026
MPL-2.0Sep 19, 2026 · metrics 2.10.0
PyPI · npm · Go +2
26At Riskhealth index
alphacep/vosk-api
Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node
Jupyter Notebook★ 15.1K↓ 758.4K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
43Weakhealth index
erusev/parsedown
Better Markdown Parser in PHP
PHP · HTML★ 15.1K↓ 1.8M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0