Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,635
Monthly downloads under inspection
586B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
6,143 recordsRanked by popularity · browse by tag · record statistics
npm
28At Riskhealth index
zspecza/common-tags
🔖 Useful template literal tags for dealing with strings in ES2015+
JavaScript★ 2,026↓ 95.7M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
Go
34At Riskhealth index
rabbitmq/amqp091-go
An AMQP 0-9-1 Go client maintained by the RabbitMQ team. Originally by @streadway: `streadway/amqp`
Go★ 2,025Aug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
xlang-ai/instructor-embedding
[ACL 2023] One Embedder, Any Task: Instruction-Finetuned Text Embeddings
Python★ 2,023Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
softonic/axios-retry
Axios plugin that intercepts failed requests and retries them whenever possible
TypeScript★ 2,015↓ 35.2M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
rubik/radon
Various code metrics for Python code
Python★ 2,010↓ 5.9M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ionic-team/ionic-cli
The Ionic command-line interface
TypeScript★ 2,003Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
26At Riskhealth index
SGrondin/bottleneck
Job scheduler and rate limiter, supports Clustering
JavaScript★ 2,002↓ 52.1M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
TypeStrong/fork-ts-checker-webpack-plugin
Webpack plugin that runs typescript type checker on a separate process.
TypeScript★ 2,000↓ 89.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
Tencent/cloudbase-framework
腾讯云开发云原生一体化部署工具 🚀 CloudBase Framework:一键部署,不限框架语言,云端一体化开发,基于Serverless 架构
JavaScript★ 1,997↓ 5,225/moSep 6, 2026
Custom licenseSep 6, 2026 · metrics 2.10.0
npm
31At Riskhealth index
d3/d3-force
Force-directed graph layout using velocity Verlet integration.
JavaScript★ 1,995↓ 77M/moAug 13, 2026
ISCAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
FormidableLabs/prism-react-renderer
🖌️ Renders highlighted Prism output to React (+ theming & vendored Prism)
TypeScript★ 1,992↓ 18.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
keajs/kea
Batteries Included State Management for React
JavaScript · TypeScript★ 1,991↓ 172.3K/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
keras-team/keras-applications
Reference implementations of popular deep learning models.
Python★ 1,991Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
Maven · PyPI · RubyGems
19Criticalhealth index
mozilla-mobile/android-components
⚠️ This project moved to a new repository. It is now developed and maintained at: https://github.com/mozilla-mobile/firefox-android
Kotlin★ 1,990Sep 11, 2026
MPL-2.0Sep 11, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
Belval/pdf2image
A python module that wraps the pdftoppm utility to convert PDF to PIL Image object
Python★ 1,982↓ 20.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
32At Riskhealth index
sindresorhus/clipboardy
Access the system clipboard (copy/paste)
JavaScript★ 1,981↓ 31.6M/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
npm
15Criticalhealth index
Starcounter-Jack/JSON-Patch
Lean and mean Javascript implementation of the JSON-Patch standard (RFC 6902). Update JSON documents using delta patches.
JavaScript · TypeScript★ 1,980↓ 32M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
26At Riskhealth index
mikenicholson/passport-jwt
Passport authentication using JSON Web Tokens
JavaScript★ 1,978↓ 16.2M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
rappasoft/laravel-livewire-tables
A dynamic table component for Laravel Livewire
PHP · Blade★ 1,975↓ 57.4K/moJul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
PyPI
42Weakhealth index
gotcha/ipdb
Integration of IPython pdb
Python★ 1,974↓ 15.4M/moSep 10, 2026
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
wkeeling/selenium-wire
Extends Selenium's Python bindings to give you the ability to inspect requests made by the browser.
Python★ 1,969↓ 946.7K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
ShieldMnt/invisible-watermark
python library for invisible image watermark (blind image watermark)
Python★ 1,965Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
27At Riskhealth index
tjfoc/gmsm
GM SM2/3/4 library based on Golang (基于Go语言的国密SM2/SM3/SM4算法库)
Go★ 1,963Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
34At Riskhealth index
facebook/fbjs
A collection of utility libraries used by other Meta JS projects.
JavaScript★ 1,962↓ 137M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
woct0rdho/triton-windows
Fork of the Triton language and compiler for Windows support and easy installation
MLIR · Python · C++★ 1,958Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
57Moderatehealth index
flexn-io/renative
🚀🚀🚀 Unified Development Platform for iOS, tvOS, Android, Android TV, Android Wear, Web, Tizen TV, Tizen Watch, Tizen Mobile, LG webOS, macOS/OSX, Windows, KaiOS, FirefoxOS Firefox TV platforms
TypeScript★ 1,954↓ 11.1K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
40Weakhealth index
mafintosh/why-is-node-running
Node is running but you don't know why? why-is-node-running is here to help you.
JavaScript★ 1,948↓ 293M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
petertodd/python-bitcoinlib
Python3 library providing an easy interface to the Bitcoin data structures and protocol.
Python★ 1,948↓ 436.2K/moAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
38Weakhealth index
nbubna/store
A better way to use localStorage and sessionStorage
JavaScript★ 1,945↓ 12.4M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
17Criticalhealth index
dominictarr/JSONStream
rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)
JavaScript★ 1,931↓ 51.6M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0