Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,547
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,365 recordsRanked by popularity · browse by tag · record statistics
Go
27At Riskhealth index
jmoiron/sqlx
general purpose extensions to golang's database/sql
Go★ 17.7KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
14Criticalhealth index
npm/npm
This repository is moving to: https://github.com/npm/cli
Mixed★ 17.6KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
15Criticalhealth index
dotnet/corefx
This repo is used for servicing PR's for .NET Core 2.1 and 3.1. Please visit us at https://github.com/dotnet/runtime
Mixed★ 17.5KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
justauth/JustAuth
🏆Gitee 最有价值开源项目 🚀:100: 小而全而美的第三方登录开源组件。目前已支持Github、Gitee、微博、钉钉、百度、Coding、腾讯云开发者平台、OSChina、支付宝、QQ、微信、淘宝、Google、Facebook、抖音、领英、小米、微软、今日头条、Teambition、StackOverflow、Pinterest、人人、华为、企业微信、酷家乐、Gitlab、美团、饿了么、推特、飞书、京东、阿里云、喜马拉雅、Amazon、Slack和 Line 等第三方平台的授权登录。 Login, so easy!
Java★ 17.5KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
32At Riskhealth index
nfl/react-helmet
A document head manager for React
JavaScript★ 17.5K↓ 13.7M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Go
28At Riskhealth index
emirpasic/gods
GoDS (Go Data Structures) - Sets, Lists, Stacks, Maps, Trees, Queues, and much more
Go★ 17.5KAug 5, 2026
Custom licenseAug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
less/less.js
Less. The dynamic stylesheet language.
JavaScript · Less★ 17K↓ 46.7M/moAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
19Criticalhealth index
janl/mustache.js
Minimal templating with {{mustaches}} in JavaScript
JavaScript★ 16.7K↓ 67.8M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
shuzheng/zheng
基于Spring+SpringMVC+Mybatis分布式敏捷开发系统架构,提供整套公共微服务服务模块:集中权限管理(单点登录)、内容管理、支付中心、用户管理(支持第三方登录)、微信平台、存储系统、配置中心、日志分析、任务和通知等,支持服务治理、监控和追踪,努力为中小型企业打造全方位J2EE企业级开发解决方案。
Java · CSS★ 16.7KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
clap-rs/clap
A full featured, fast Command Line Argument Parser for Rust
Rust★ 16.6K↓ 256M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
JeffLi1993/springboot-learning-example
spring boot 实践学习案例,是 spring boot 初学者及核心技术巩固的最佳实践。
Java · HTML★ 16.6KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aio-libs/aiohttp
Asynchronous HTTP client/server framework for asyncio and Python
Python★ 16.5KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
piskvorky/gensim
Topic Modelling for Humans
Python★ 16.5KAug 5, 2026
LGPL-2.1Aug 5, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
cvat-ai/cvat
Computer Vision Annotation Tool (CVAT) is a leading platform for building high-quality visual datasets for vision AI. It offers open-source, cloud, and enterprise products, as well as labeling services, for image, video, and 3D annotation with AI-assisted labeling, quality assurance, team collaboration, analytics, and developer APIs.
Python · TypeScript · JavaScript★ 16.5K↓ 105.1K/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
16Criticalhealth index
brix/crypto-js
JavaScript library of crypto standards.
JavaScript★ 16.4K↓ 76.7M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
treeverse/dvc
🦉 Data Versioning and ML Experiments
Python★ 15.8KAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
Maven
16Criticalhealth index
dyc87112/SpringBoot-Learning
《Spring Boot基础教程》,2.x版本持续连载中!点击下方链接直达教程目录!
Java · HTML★ 15.7KAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
exceljs/exceljs
Excel Workbook Manager
JavaScript★ 15.4K↓ 49.6M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
albumentations-team/albumentations
Fast and flexible image augmentation library. Paper about the library: https://www.mdpi.com/2078-2489/11/2/125
Python★ 15.3KAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Chocobozzz/PeerTube
ActivityPub-federated video streaming platform using P2P directly in your web browser
TypeScript★ 15.2K↓ 1,270/moAug 5, 2026
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
erusev/parsedown
Better Markdown Parser in PHP
PHP · HTML★ 15.1K↓ 1.6M/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
PyPI · npm · Go +2
28At Riskhealth index
alphacep/vosk-api
Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node
Jupyter Notebook★ 15K↓ 776.1K/moAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
16Criticalhealth index
kriskowal/q
A promise library for JavaScript
JavaScript★ 15K↓ 56M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
sindresorhus/got
🌐 Human-friendly and powerful HTTP request library for Node.js
TypeScript★ 14.9K↓ 155M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
sympy/sympy
A computer algebra system written in pure Python
Python★ 14.8KAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
mamoe/mirai
高效率 QQ 机器人支持库
Kotlin★ 14.8KAug 15, 2026
AGPL-3.0Aug 15, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
aleju/imgaug
Image augmentation for machine learning experiments.
Python★ 14.7K↓ 1.3M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nltk/nltk
NLTK Source
Python★ 14.7KAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
bulletphysics/bullet3
Bullet Physics SDK: real-time collision detection and multi-physics simulation for VR, games, visual effects, robotics, machine learning etc.
C++ · C★ 14.7K↓ 583.3K/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
neutraltone/awesome-stock-resources
:city_sunrise: A collection of links for free stock photography, video and Illustration websites
Ruby★ 14.5KAug 27, 2026
CC0-1.0Aug 27, 2026 · metrics 2.10.0