Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,287
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,258 recordsRanked by popularity · browse by tag · record statistics
npm
22Criticalhealth index
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
JavaScript★ 1,736↓ 835M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Packagist
23Criticalhealth index
symfony/polyfill-php80
Symfony polyfill backporting some PHP 8.0+ features to lower PHP versions
PHP★ 1,726↓ 17.6M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
32At riskhealth index
zzzprojects/System.Linq.Dynamic.Core
The .NET Standard / .NET Core version from the System Linq Dynamic functionality.
C#★ 1,708Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
Dirkster99/AvalonDock
Our own development branch of the well known WPF document docking library
C#★ 1,705Jul 21, 2026
MS-PLJul 21, 2026 · metrics 1.13.0
npm
29Criticalhealth index
lukeed/kleur
The fastest Node.js library for formatting terminal text with ANSI colors~!
JavaScript · Shell★ 1,696↓ 316M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
12Criticalhealth index
bezzad/Downloader
Fast, cross-platform and reliable multipart downloader with asynchronous progress events for .NET applications.
C#★ 1,685Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
atlassian-api/atlassian-python-api
Atlassian Python REST API wrapper. The atlassian-python-api library provides a simple and convenient way to interact with Atlassian products (such as Jira Service management, Jira Software, Confluence, Bitbucket and apps Insight, X-Ray) using Python. It is based on the official REST APIs of these products and by community for Atlassian
Python★ 1,663↓ 15.6M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
rushter/selectolax
Python binding to Modest and Lexbor engines. Fast HTML5 parser with CSS selectors for Python.
Cython · Python★ 1,656Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
jorgebucaran/colorette
🌈Easily set your terminal text color & styles
JavaScript★ 1,625↓ 282M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
32At riskhealth index
taisei-project/taisei
A free and open-source Touhou Project fangame
C★ 1,590Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
cweiske/jsonmapper
Map nested JSON structures onto PHP classes
PHP★ 1,576↓ 2.1M/moJul 22, 2026
OSL-3.0Jul 22, 2026 · metrics 1.13.0
RubyGems
31At riskhealth index
ffaker/ffaker
Faker refactored.
Ruby★ 1,574Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
jshttp/cookie
HTTP server cookie parsing and serialization
TypeScript★ 1,529↓ 693M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
bits-and-blooms/bitset
Go package implementing bitsets
Go★ 1,511Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
crates.io · npm
30At riskhealth index
PolyMeilex/Neothesia
Flashy Synthesia Like Software For Linux, Windows and MacOs
Rust★ 1,508Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
npm
34At riskhealth index
Voxelum/x-minecraft-launcher
An Open Source Minecraft Launcher with Modern UX. Provides a Disk Efficient way to manage all your Mods!
TypeScript · Vue★ 1,507Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
laravel/lumen-framework
The Laravel Lumen Framework.
PHP★ 1,507↓ 222K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
22Criticalhealth index
sindresorhus/pify
Promisify a callback-style function
JavaScript · TypeScript★ 1,505↓ 555M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
36At riskhealth index
requests-cache/requests-cache
Persistent HTTP cache for python requests
Python★ 1,499Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
lidatong/dataclasses-json
Easily serialize Data Classes to and from JSON
Python★ 1,485Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
33At riskhealth index
emcconville/wand
The ctypes-based simple ImageMagick binding for Python
Python★ 1,481↓ 1.4M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
slevomat/coding-standard
Slevomat Coding Standard for PHP_CodeSniffer provides many useful sniffs
PHP★ 1,479↓ 3.5M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · Maven
30At riskhealth index
sartoopjj/thefeed
DNS-based feed reader and lite messenger for environments where only DNS queries work. Read Telegram channels and public X accounts, and exchange end-to-end-encrypted messages with other users — all over DNS.
Go · JavaScript★ 1,456Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
30At riskhealth index
gleam-wisp/wisp
🧚 A practical web framework for Gleam
Gleam★ 1,452Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
microlinkhq/unavatar
Get unified user avatar from social networks, including Instagram, SoundCloud, Telegram, Twitter, YouTube & more.
HTML★ 1,448Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
composer/installers
A Multi-Framework Composer Library Installer
PHP★ 1,440↓ 2.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
24Criticalhealth index
serilog/serilog-aspnetcore
Serilog integration for ASP.NET Core
C#★ 1,427Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
atipugin/telegram-bot-ruby
Ruby wrapper for Telegram's Bot API
Ruby★ 1,425Jul 23, 2026
WTFPLJul 23, 2026 · metrics 1.13.0
32At riskhealth index
benoitc/hackney
simple HTTP client in Erlang
Erlang★ 1,415Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
PeculiarVentures/PKI.js
PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.
TypeScript★ 1,391↓ 25.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0