Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,547
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,319 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
pallets/jinja
A very fast and expressive template engine.
Python★ 11.7KAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
42Weakhealth index
tachyons-css/tachyons
Functional css for humans
CSS★ 11.7K↓ 409.6K/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
code4craft/webmagic
A scalable web crawler framework for Java.
Java · HTML★ 11.7KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
egulias/EmailValidator
PHP Email address validator
PHP★ 11.6K↓ 16.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
ssssssss-team/spider-flow
新一代爬虫平台,以图形化方式定义爬虫流程,不写代码即可完成爬虫。
Java★ 11.4KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
JavaScript · Stylus · CSS★ 11.3K↓ 11.9M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
60Moderatehealth index
FormidableLabs/victory
A collection of composable React components for building interactive data visualizations
TypeScript · MDX · JavaScript★ 11.2K↓ 17M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 26.5M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
18Criticalhealth index
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
JavaScript★ 11.2KAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
34At Riskhealth index
FerretDB/FerretDB
A truly Open Source MongoDB alternative
Go★ 11.1KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
55Moderatehealth index
gregberge/svgr
Transform SVGs into React components 🦁
TypeScript · MDX · JavaScript★ 11K↓ 305M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Go
34At Riskhealth index
siderolabs/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
Go★ 11KAug 28, 2026
MPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
kkroening/ffmpeg-python
Python bindings for FFmpeg - with complex filtering support
Python★ 11K↓ 9.6M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
jfeinstein10/SlidingMenu
An Android library that allows you to easily create applications with slide-in menus. You may use it in your Android apps provided that you cite this project and include the license in your app. Thanks!
Java★ 11KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
square/javapoet
A Java API for generating .java source files.
Java★ 10.8KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
51Moderatehealth index
TooTallNate/Java-WebSocket
A barebones WebSocket client and server implementation written in 100% Java.
Java · HTML★ 10.8KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.8K↓ 272M/moAug 20, 2026
Apache-2.0Aug 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.6KAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
NuGet
32At Riskhealth index
StockSharp/StockSharp
Algorithmic trading and quantitative trading open source platform to develop trading robots (stock markets, forex, crypto, bitcoins, and options).
C#★ 10.6KAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
59Moderatehealth index
gka/chroma.js
JavaScript library for all kinds of color manipulations
JavaScript★ 10.6K↓ 12.4M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
unovue/shadcn-vue
Vue port of shadcn-ui
TypeScript · Vue★ 10.5K↓ 847.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
34At Riskhealth index
sourcegraph/conc
Better structured concurrency for go
Go★ 10.4KAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Python★ 10.4KAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Stuk/jszip
Create, read and edit .zip files with Javascript
JavaScript★ 10.4K↓ 160M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
Go
29At Riskhealth index
noisetorch/NoiseTorch
Real-time microphone noise suppression on Linux.
Go · C★ 10.3KAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reactjs/react-transition-group
An easy way to perform animations when a React component enters or leaves the DOM
JavaScript★ 10.2K↓ 227M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
pahen/madge
Create graphs from your CommonJS, AMD or ES6 module dependencies
JavaScript★ 10.2K↓ 12.2M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
tweenjs/tween.js
JavaScript/TypeScript animation engine
TypeScript · JavaScript★ 10.1K↓ 35.5M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
stanfordnlp/CoreNLP
CoreNLP: A Java suite of core NLP tools for tokenization, sentence segmentation, NER, parsing, coreference, sentiment analysis, etc.
Java★ 10.1KAug 28, 2026
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Go
19Criticalhealth index
golang/protobuf
Go support for Google's protocol buffers
Go★ 10.1KAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0