Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,297
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,790 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
geopy/geopy
Geocoding library for Python.
Python★ 4,856↓ 13.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
19Criticalhealth index
effector/effector
Business logic with ease ☄️
TypeScript★ 4,854↓ 927K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
lk-geimfari/mimesis
Mimesis is a Python library for generating fake but realistic data in multiple languages and locales.
Python★ 4,839↓ 2.6M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii
Yii PHP Framework 1.1.x
PHP★ 4,823↓ 94.4K/moAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
Studio-42/elFinder
📁 Open-source file manager for web, written in JavaScript using jQuery and jQuery UI
JavaScript · PHP★ 4,799↓ 188.8K/moAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
orchidsoftware/platform
Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards.
PHP★ 4,793↓ 25K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm · Hex
34At Riskhealth index
blockscout/blockscout
Blockchain explorer for Ethereum based network and a tool for inspecting and analyzing EVM based blockchains.
Elixir★ 4,751Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
Go · RubyGems
34At Riskhealth index
werf/werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
Go★ 4,718Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
h2database/h2database
H2 is an embeddable RDBMS written in Java.
Java★ 4,623Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
php-amqplib/php-amqplib
The most widely used PHP client for RabbitMQ
PHP★ 4,602↓ 2.3M/moAug 27, 2026
LGPL-2.1Aug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
fixie-ai/ultravox
A fast multimodal LLM for real-time voice
Python★ 4,567Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
JonathanSalwan/ROPgadget
This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.
Python★ 4,480Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
PHP★ 4,296↓ 409.1K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
konstaui/konsta
Mobile UI components made with Tailwind CSS
JavaScript · Vue · Svelte★ 4,256↓ 74.6K/moSep 27, 2026
MITSep 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
TypeScript★ 4,116↓ 2.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
apache/tika
The Apache Tika toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF).
Java · Rich Text Format★ 4,100Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ts-essentials/ts-essentials
All essential TypeScript types in one place 🤙
TypeScript★ 4,076↓ 23.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
taiga-family/taiga-ui
Angular components library for awesome people
TypeScript · HTML★ 4,047↓ 709.1K/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pika/pika
Pure Python RabbitMQ/AMQP 0-9-1 client library
Python★ 3,883↓ 11.9M/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
jellyfin/jellyfin-web
The Free Software Media System - Official Web Client
JavaScript · TypeScript · SCSS★ 3,840↓ 54/moSep 13, 2026
GPL-2.0Sep 13, 2026 · metrics 2.10.0
Packagist
8Criticalhealth index
lazychaser/laravel-nestedset
Effective tree structures in Laravel 4-8
PHP★ 3,803↓ 421.8K/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm · Maven
34At Riskhealth index
JetBrains/ring-ui
A collection of JetBrains Web UI components
TypeScript · CSS★ 3,790↓ 101.6K/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
—
17Criticalhealth index
yandex/odyssey
Scalable PostgreSQL connection pooler
C★ 3,624Sep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ngxs/store
🚀 NGXS - State Management for Angular
TypeScript★ 3,543↓ 2.1M/moOct 10, 2026
MITOct 10, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
danog/MadelineProto
Async PHP client API for the telegram MTProto protocol
PHP★ 3,512↓ 25.9K/moSep 13, 2026
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Suor/funcy
A fancy and practical functional tools
Python★ 3,510Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
piskvorky/smart_open
Utils for streaming large files (S3, HDFS, gzip, bz2...)
Python★ 3,458↓ 70.7M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
padrino/padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
Ruby · Less★ 3,400Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
zephir-lang/zephir
Zephir is a compiled high-level language aimed to ease the creation of C-extensions for PHP
PHP · C★ 3,381↓ 6,489/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
linq2db/linq2db
Linq to database provider.
C#★ 3,326Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0