Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,675
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,672 recordsRanked by popularity · browse by tag · record statistics
PyPI
49At riskhealth index
atlassian-api/atlassian-python-api
Atlassian Python REST API wrapper. The atlassian-python-api library provides a simple and convenient way to interact with Atlassian products (such as Jira Service management, Jira Software, Confluence, Bitbucket and apps Insight, X-Ray) using Python. It is based on the official REST APIs of these products and by community for Atlassian
Python★ 1,663↓ 15.6M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
rushter/selectolax
Python binding to Modest and Lexbor engines. Fast HTML5 parser with CSS selectors for Python.
Cython · Python★ 1,656Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
jorgebucaran/colorette
🌈Easily set your terminal text color & styles
JavaScript★ 1,625↓ 282M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
laravel/envoy
Elegant SSH tasks for PHP.
PHP★ 1,613↓ 121.8K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
21Criticalhealth index
interactivethings/catalog
Create living style guides using Markdown or React
JavaScript · TypeScript★ 1,601↓ 4,545/moJul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 1.13.0
32At riskhealth index
taisei-project/taisei
A free and open-source Touhou Project fangame
C★ 1,590Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
cweiske/jsonmapper
Map nested JSON structures onto PHP classes
PHP★ 1,576↓ 2.1M/moJul 22, 2026
OSL-3.0Jul 22, 2026 · metrics 1.13.0
RubyGems
31At riskhealth index
ffaker/ffaker
Faker refactored.
Ruby★ 1,574Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
jshttp/cookie
HTTP server cookie parsing and serialization
TypeScript★ 1,529↓ 693M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
bits-and-blooms/bitset
Go package implementing bitsets
Go★ 1,511Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
crates.io · npm
30At riskhealth index
PolyMeilex/Neothesia
Flashy Synthesia Like Software For Linux, Windows and MacOs
Rust★ 1,508Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
npm
34At riskhealth index
Voxelum/x-minecraft-launcher
An Open Source Minecraft Launcher with Modern UX. Provides a Disk Efficient way to manage all your Mods!
TypeScript · Vue★ 1,507Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
laravel/lumen-framework
The Laravel Lumen Framework.
PHP★ 1,507↓ 222K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
22Criticalhealth index
sindresorhus/pify
Promisify a callback-style function
JavaScript · TypeScript★ 1,505↓ 555M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
36At riskhealth index
requests-cache/requests-cache
Persistent HTTP cache for python requests
Python★ 1,499Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
lidatong/dataclasses-json
Easily serialize Data Classes to and from JSON
Python★ 1,485Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
33At riskhealth index
emcconville/wand
The ctypes-based simple ImageMagick binding for Python
Python★ 1,481↓ 1.4M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
slevomat/coding-standard
Slevomat Coding Standard for PHP_CodeSniffer provides many useful sniffs
PHP★ 1,479↓ 3.5M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
29Criticalhealth index
lukeed/dequal
A tiny (304B to 489B) utility to check for deep equality
JavaScript★ 1,467↓ 292M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go · Maven
30At riskhealth index
sartoopjj/thefeed
DNS-based feed reader and lite messenger for environments where only DNS queries work. Read Telegram channels and public X accounts, and exchange end-to-end-encrypted messages with other users — all over DNS.
Go · JavaScript★ 1,456Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
30At riskhealth index
gleam-wisp/wisp
🧚 A practical web framework for Gleam
Gleam★ 1,452Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
sezna/nps
NPM Package Scripts -- All the benefits of npm scripts without the cost of a bloated package.json and limits of json
JavaScript★ 1,450↓ 169.9K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
49At riskhealth index
microlinkhq/unavatar
Get unified user avatar from social networks, including Instagram, SoundCloud, Telegram, Twitter, YouTube & more.
HTML★ 1,448Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
composer/installers
A Multi-Framework Composer Library Installer
PHP★ 1,440↓ 2.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
bovigo/vfsStream
vfsStream is a stream wrapper for a virtual file system that may be helpful in unit tests to mock the real file system. It can be used with any unit test framework, like PHPUnit or SimpleTest.
PHP★ 1,436↓ 2M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
24Criticalhealth index
serilog/serilog-aspnetcore
Serilog integration for ASP.NET Core
C#★ 1,427Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
atipugin/telegram-bot-ruby
Ruby wrapper for Telegram's Bot API
Ruby★ 1,425Jul 23, 2026
WTFPLJul 23, 2026 · metrics 1.13.0
32At riskhealth index
benoitc/hackney
simple HTTP client in Erlang
Erlang★ 1,415Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
browserify/events
Node's event emitter for all engines.
JavaScript★ 1,409Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
PeculiarVentures/PKI.js
PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.
TypeScript★ 1,391↓ 25.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0