Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,351
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,918 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
Koenkk/zigbee-herdsman-converters
Collection of device converters to be used with zigbee-herdsman
TypeScript★ 1,218↓ 94.5K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
Python★ 1,212↓ 649.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,211↓ 169M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
RubyGems · npm
28At Riskhealth index
ai/autoprefixer-rails
Autoprefixer for Ruby and Ruby on Rails
Ruby★ 1,210Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,198↓ 154M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,198Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
reo7sp/tgbot-cpp
C++ library for Telegram bot API
C++★ 1,194Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
RubyGems
57Moderatehealth index
email-spec/email-spec
Collection of RSpec/MiniTest matchers and Cucumber steps for testing email in a ruby app using ActionMailer or Pony
Ruby★ 1,188Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Maven
8Criticalhealth index
mgarin/weblaf
WebLaF is a fully open-source Look & Feel and component library written in pure Java for cross-platform desktop Swing applications.
Java★ 1,178Sep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
Python★ 1,175Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
crates.io · npm
19Criticalhealth index
Gisto/Gisto
Gisto is a Cross-platform snippets management application that allows you and/or your team share code snippets fast and easily. Based on GitHub Gists or GitLab snippets Infrastructure which means you can use all your existing snippets by connecting your GitHub/GitLab account!
TypeScript · CSS★ 1,171Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
VKCOM/VKUI
VKUI – это набор React-компонентов, с помощью которых можно создавать интерфейсы, внешне неотличимые от наших iOS и Android приложений.
TypeScript · MDX★ 1,161↓ 51.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
solod-dev/solod
A subset of Go that translates to C
Go★ 1,161Sep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
ncalc/ncalc
NCalc is a fast and lightweight expression evaluator library for .NET, designed for flexibility and high performance. It supports a wide range of mathematical and logical operations.
C#★ 1,158Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
15Criticalhealth index
grinev/opencode-telegram-bot
OpenCode mobile client via Telegram: run and monitor AI coding tasks from your phone while everything runs locally on your machine. Scheduled tasks support.
TypeScript★ 1,153↓ 4,289/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI · npm
33At Riskhealth index
ivelum/djangoql
Advanced search language for Django
Python · HTML★ 1,139Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
NuGet
28At Riskhealth index
dadhi/DryIoc
DryIoc is fast, small, full-featured IoC Container for .NET
C#★ 1,131Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytries/marisa-trie
Static memory-efficient Trie-like structures for Python based on marisa-trie C++ library.
Cython · Python★ 1,124↓ 2.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
patrickhulce/third-party-web
Data on third party entities and their impact on the web.
JavaScript★ 1,110↓ 20.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
werf/nelm
Nelm is a Helm 4 alternative. It is a Kubernetes deployment tool that manages Helm Charts and deploys them to Kubernetes. The Nelm goal is to provide a modern alternative to Helm, with long-standing issues fixed and many new major features introduced.
Go★ 1,106Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
floere/phony
E164 international phone number normalizing, splitting, formatting.
Ruby★ 1,093Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
shashwatak/satellite-js
Modular set of functions for SGP4 and SDP4 propagation of TLE and OMM.
TypeScript · C++★ 1,089↓ 453.1K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
crates.io · npm
34At Riskhealth index
codemod/codemod
The CLI for codemods: scaffold, share, and run multi-step transformations of any size. First-class ast-grep support. Fast, reliable, polyglot.
Rust★ 1,088Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
Kotlin/dataframe
Kotlin DataFrame: typesafe in-memory structured data processing for JVM
Kotlin★ 1,064Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-queue
Yii2 Queue Extension. Supports DB, Redis, RabbitMQ, Beanstalk and Gearman
PHP★ 1,064↓ 270.5K/moSep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
NuGet
15Criticalhealth index
DigDes/SoapCore
SOAP extension for ASP.NET Core
C#★ 1,056Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
gravity-ui/uikit
No repository description published.
TypeScript · SCSS★ 1,044↓ 109.1K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
71Goodhealth index
net-ssh/net-ssh
Pure Ruby implementation of an SSH (protocol 2) client
Ruby★ 1,023Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
16Criticalhealth index
PAIR-code/what-if-tool
Source code/webpage/demos for the What-If Tool
HTML★ 1,013Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
DelSkayn/rquickjs
High level bindings to the quickjs javascript engine
Rust★ 1,008↓ 2.3M/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0