Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,285
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,790 recordsRanked by popularity · browse by tag · record statistics
Go · npm
34At Riskhealth index
anyproto/anytype-ts
Official Anytype client for MacOS, Linux, and Windows
TypeScript★ 8,836Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
eternnoir/pyTelegramBotAPI
Python Telegram bot api.
Python★ 8,779↓ 947.5K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
VowpalWabbit/vowpal_wabbit
Vowpal Wabbit is a machine learning system which pushes the frontier of machine learning with techniques such as online, hashing, allreduce, reductions, learning2search, active, and interactive learning.
C++ · C# · PLSQL★ 8,721↓ 195/moSep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
open-pencil/open-pencil
AI-native design editor. Open-source Figma alternative.
TypeScript★ 8,326↓ 73.6K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
SixLabors/ImageSharp
A modern, cross-platform, 2D Graphics library for .NET
C#★ 8,034Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/pip-tools
A set of tools to keep your pinned Python dependencies fresh.
Python★ 8,008↓ 16.6M/moAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
Laravel-Lang/lang
List of 128 languages for Laravel Framework, Laravel Jetstream, Laravel Fortify, Laravel Breeze, Laravel Cashier, Laravel Nova and Laravel UI.
PHP★ 7,776↓ 522.1K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
34At Riskhealth index
evrone/go-clean-template
Clean Architecture template for Golang services
Go★ 7,662Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nanostores/nanostores
A tiny (340 bytes) state manager for React/RN/Preact/Vue/Svelte with many atomic tree-shakable stores
TypeScript · JavaScript★ 7,581↓ 31.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
swagger-api/swagger-core
Examples and server integrations for generating the Swagger API Specification, which enables easy access to your REST API
Java★ 7,530Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
wiremock/wiremock
A tool for mocking HTTP services
Java★ 7,349Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
Python · JavaScript★ 7,136Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/size-limit
Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit.
JavaScript★ 7,036Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
sqldelight/sqldelight
SQLDelight - Generates typesafe Kotlin APIs from SQL
Kotlin★ 6,865Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
subzeroid/instagrapi
🔥 The fastest and powerful Python library for Instagram Private API 2026 with HikerAPI SaaS
Python★ 6,812↓ 605.3K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm · Packagist
34At Riskhealth index
humhub/humhub
HumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
PHP★ 6,751Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mesonbuild/meson
The Meson Build System
Python · Meson★ 6,615↓ 17.5M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
espressif/esptool
Serial utility for flashing, provisioning, and interacting with Espressif SoCs
Python★ 6,458↓ 1.2M/moAug 28, 2026
GPL-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
hanami/hanami
A flexible framework for maintainable Ruby apps
Ruby★ 6,407Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
nissl-lab/npoi
a .NET library that can read/write Office formats without Microsoft Office installed. No COM+, no interop.
C#★ 6,197Sep 22, 2026
Apache-2.0Sep 22, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
redmine/redmine
Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp
Ruby · HTML★ 6,022Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aiogram/aiogram
aiogram is a modern and fully asynchronous framework for Telegram Bot API written in Python using asyncio
Python★ 5,850↓ 4.4M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
7Criticalhealth index
disintegration/imaging
Imaging is a simple image processing package for Go
Go★ 5,756Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet · PyPI
34At Riskhealth index
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
C#★ 5,686Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI · RubyGems
34At Riskhealth index
google/clusterfuzz
Scalable fuzzing infrastructure.
Python★ 5,595↓ 6,886/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
kangax/html-minifier
Javascript-based HTML compressor/minifier (with Node.js support)
JavaScript★ 5,034↓ 11.2M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
frangoteam/FUXA
Web-based Process Visualization (SCADA/HMI/Dashboard) software
TypeScript · JavaScript · HTML★ 5,027↓ 45/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
11Criticalhealth index
mailru/easyjson
Fast JSON serializer for golang.
Go★ 4,916Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
Codeception/Codeception
Full-stack testing PHP framework
PHP★ 4,861↓ 1.4M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0