Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,112
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,939 recordsRanked by popularity · browse by tag · record statistics
Maven
34At Riskhealth index
mamoe/mirai
高效率 QQ 机器人支持库
Kotlin★ 14.8KSep 18, 2026
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
aleju/imgaug
Image augmentation for machine learning experiments.
Python★ 14.7K↓ 370.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
bulletphysics/bullet3
Bullet Physics SDK: real-time collision detection and multi-physics simulation for VR, games, visual effects, robotics, machine learning etc.
C++ · C★ 14.7K↓ 468.9K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nltk/nltk
NLTK Source
Python★ 14.7KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
65Goodhealth index
http-party/http-server
A simple, zero-configuration, command-line http server
JavaScript★ 14.2K↓ 27.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
http-party/node-http-proxy
A full-featured http proxy for node.js
JavaScript★ 14.1K↓ 94.6M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
sivel/speedtest-cli
Command line interface for testing internet bandwidth using speedtest.net
Python★ 14.1K↓ 280.9K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
microsoft/LoRA
Code for loralib, an implementation of "LoRA: Low-Rank Adaptation of Large Language Models"
Python★ 13.8K↓ 217.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/browserslist
🦔 Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-preset-env
JavaScript★ 13.6K↓ 726M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
66Goodhealth index
graphql/dataloader
DataLoader is a generic utility to be used as part of your application's data fetching layer to provide a consistent API over various backends and reduce requests to those backends via batching and caching.
JavaScript★ 13.4K↓ 49.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
mishoo/UglifyJS
JavaScript parser / mangler / compressor / beautifier toolkit
JavaScript★ 13.4K↓ 175M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Maven · PyPI
34At Riskhealth index
CleverRaven/Cataclysm-DDA
Cataclysm - Dark Days Ahead. A turn-based survival game set in a post-apocalyptic world.
C++★ 13.2KSep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
TypeStrong/ts-node
TypeScript execution and REPL for node.js
TypeScript · JavaScript★ 13.1K↓ 183M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
The-PR-Agent/pr-agent
🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
Python★ 13.1K↓ 26.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
48Weakhealth index
dip/cmdk
Fast, unstyled command menu React component.
TypeScript · SCSS★ 13KSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
asweigart/pyautogui
A cross-platform GUI automation Python module for human beings. Used to programmatically control the mouse & keyboard.
Python★ 12.7K↓ 2.9M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
atomiks/tippyjs
Tooltip, popover, dropdown, and menu library
JavaScript · TypeScript★ 12.2K↓ 24.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
marcotcr/lime
Lime: Explaining the predictions of any machine learning classifier
JavaScript · Python★ 12.2K↓ 452.5K/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
tadata-org/fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Python★ 12K↓ 17M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
karma-runner/karma
Spectacular Test Runner for JavaScript
JavaScript★ 12K↓ 12.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
developit/mitt
🥊 Tiny 200 byte functional event emitter / pubsub.
TypeScript★ 11.9K↓ 118M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
tj/co
The ultimate generator based flow-control goodness for nodejs (supports thunks, promises, etc)
JavaScript★ 11.8K↓ 161M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
Nozbe/WatermelonDB
🍉 Reactive & asynchronous database for powerful React and React Native apps ⚡️
JavaScript · Objective-C★ 11.8K↓ 226.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
38Weakhealth index
tachyons-css/tachyons
Functional css for humans
CSS★ 11.7K↓ 352K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
JavaScript · Stylus · CSS★ 11.3K↓ 11M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 22.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
JavaScript★ 11.2KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
54Moderatehealth index
gregberge/svgr
Transform SVGs into React components 🦁
TypeScript · MDX · JavaScript★ 11.1K↓ 282M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
fdehau/tui-rs
Build terminal user interfaces and dashboards using Rust
Rust★ 10.9K↓ 114.9K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.9KSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0