Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,239
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
265 recordsRanked by popularity · browse by tag · record statistics
NuGet
32At Riskhealth index
StockSharp/StockSharp
Algorithmic trading and quantitative trading open source platform to develop trading robots (stock markets, forex, crypto, bitcoins, and options).
C#★ 10.9KOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
JetBrains/Exposed
Kotlin SQL Framework
Kotlin★ 9,297Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
swagger-api/swagger-core
Examples and server integrations for generating the Swagger API Specification, which enables easy access to your REST API
Java★ 7,530Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/size-limit
Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit.
JavaScript★ 7,036Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm · Packagist
34At Riskhealth index
humhub/humhub
HumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
PHP★ 6,751Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
effector/effector
Business logic with ease ☄️
TypeScript★ 4,854↓ 927K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm · Hex
34At Riskhealth index
blockscout/blockscout
Blockchain explorer for Ethereum based network and a tool for inspecting and analyzing EVM based blockchains.
Elixir★ 4,751Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
apache/tika
The Apache Tika toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF).
Java · Rich Text Format★ 4,100Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
zephir-lang/zephir
Zephir is a compiled high-level language aimed to ease the creation of C-extensions for PHP
PHP · C★ 3,381↓ 6,489/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
datachain-ai/datachain
The Context Layer for unstructured data: typed, versioned datasets over S3, GCS, Azure
Python★ 2,827↓ 15.9K/moOct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
bucket4j/bucket4j
Java rate limiting library based on token-bucket algorithm.
Java★ 2,813Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
ytsaurus/ytsaurus
YTsaurus is a scalable and fault-tolerant open-source big data platform.
C++ · C · Python★ 2,319Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/hashes
Collection of cryptographic hash functions written in pure Rust
Rust★ 2,276↓ 206M/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-random/rand
A Rust library for random number generation.
Rust★ 2,087↓ 178M/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
Kotlin/kotlinx.html
Kotlin DSL for HTML
Kotlin★ 1,755Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
Kodiqa-Solutions/VaultS3
Lightweight, S3-compatible object storage server with built-in web dashboard. Single binary, low memory, encryption at rest.
Go · TypeScript★ 1,635Oct 19, 2026
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
bootique/bootique
Bootique is a minimally opinionated platform for modern runnable Java apps.
Java★ 1,427Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
15Criticalhealth index
ghost1372/HandyControls
Contains some simple and commonly used WPF controls based on HandyControl
C#★ 1,316Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI · Maven
34At Riskhealth index
Kotlin/kotlin-jupyter
Kotlin kernel for Jupyter/IPython
Kotlin★ 1,232↓ 1,502/moOct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
reo7sp/tgbot-cpp
C++ library for Telegram bot API
C++★ 1,194Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
floere/phony
E164 international phone number normalizing, splitting, formatting.
Ruby★ 1,093Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
yabeda-rb/yabeda
Extendable framework for collecting and exporting metrics from your Ruby application
Ruby★ 965Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
10Criticalhealth index
flyingmutant/rapid
Rapid is a modern Go property-based testing library
Go★ 901Oct 21, 2026
MPL-2.0Oct 21, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
OpenIdentityPlatform/OpenAM
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
Java★ 899Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Cyberdrop-DL/cyberdrop-dl
Bulk asynchronous downloader for multiple file hosts
Python★ 760↓ 7,831/moOct 17, 2026
GPL-3.0Oct 17, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
mindsdb/anton
self-improving agent
Python★ 757↓ 15.7K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
ispras/dedoc
Dedoc is a library (service) for automate documents parsing and bringing to a uniform format. It automatically extracts content, logical structure, tables, and meta information from textual electronic documents. (Parse document; Document content extraction; Logical structure extraction; PDF parser; Scanned document parser; DOCX parser; HTML parser
Python · HTML★ 737↓ 509/moOct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
odnoklassniki/one-nio
Unconventional I/O library for Java
Java · C★ 726Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
microsoft/typed-rest-client
Node Rest and Http Clients with typings for use with TypeScript
TypeScript · JavaScript★ 683↓ 22.7M/moOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0