Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,139
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,961 recordsRanked by popularity · browse by tag · record statistics
npm
16Criticalhealth index
kriskowal/q
A promise library for JavaScript
JavaScript★ 15K↓ 50.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
sympy/sympy
A computer algebra system written in pure Python
Python★ 14.9KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
sindresorhus/got
🌐 Human-friendly and powerful HTTP request library for Node.js
TypeScript★ 14.9K↓ 145M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
mamoe/mirai
高效率 QQ 机器人支持库
Kotlin★ 14.8KSep 18, 2026
AGPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
aleju/imgaug
Image augmentation for machine learning experiments.
Python★ 14.7K↓ 370.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
bulletphysics/bullet3
Bullet Physics SDK: real-time collision detection and multi-physics simulation for VR, games, visual effects, robotics, machine learning etc.
C++ · C★ 14.7K↓ 468.9K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nltk/nltk
NLTK Source
Python★ 14.7KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
65Goodhealth index
http-party/http-server
A simple, zero-configuration, command-line http server
JavaScript★ 14.2K↓ 27.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
http-party/node-http-proxy
A full-featured http proxy for node.js
JavaScript★ 14.1K↓ 94.6M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
sivel/speedtest-cli
Command line interface for testing internet bandwidth using speedtest.net
Python★ 14.1K↓ 280.9K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
microsoft/LoRA
Code for loralib, an implementation of "LoRA: Low-Rank Adaptation of Large Language Models"
Python★ 13.8K↓ 217.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/browserslist
🦔 Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-preset-env
JavaScript★ 13.6K↓ 726M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
66Goodhealth index
graphql/dataloader
DataLoader is a generic utility to be used as part of your application's data fetching layer to provide a consistent API over various backends and reduce requests to those backends via batching and caching.
JavaScript★ 13.4K↓ 49.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
mishoo/UglifyJS
JavaScript parser / mangler / compressor / beautifier toolkit
JavaScript★ 13.4K↓ 175M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Maven · PyPI
34At Riskhealth index
CleverRaven/Cataclysm-DDA
Cataclysm - Dark Days Ahead. A turn-based survival game set in a post-apocalyptic world.
C++★ 13.2KSep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
TypeStrong/ts-node
TypeScript execution and REPL for node.js
TypeScript · JavaScript★ 13.1K↓ 183M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
The-PR-Agent/pr-agent
🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
Python★ 13.1K↓ 26.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
48Weakhealth index
dip/cmdk
Fast, unstyled command menu React component.
TypeScript · SCSS★ 13KSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
asweigart/pyautogui
A cross-platform GUI automation Python module for human beings. Used to programmatically control the mouse & keyboard.
Python★ 12.7K↓ 2.9M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
atomiks/tippyjs
Tooltip, popover, dropdown, and menu library
JavaScript · TypeScript★ 12.2K↓ 24.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
marcotcr/lime
Lime: Explaining the predictions of any machine learning classifier
JavaScript · Python★ 12.2K↓ 452.5K/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
tadata-org/fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Python★ 12K↓ 17M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
karma-runner/karma
Spectacular Test Runner for JavaScript
JavaScript★ 12K↓ 12.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
developit/mitt
🥊 Tiny 200 byte functional event emitter / pubsub.
TypeScript★ 11.9K↓ 118M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
tj/co
The ultimate generator based flow-control goodness for nodejs (supports thunks, promises, etc)
JavaScript★ 11.8K↓ 161M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
seanmonstar/reqwest
An easy and powerful Rust HTTP Client
Rust★ 11.8K↓ 60.6M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
Nozbe/WatermelonDB
🍉 Reactive & asynchronous database for powerful React and React Native apps ⚡️
JavaScript · Objective-C★ 11.8K↓ 226.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
38Weakhealth index
tachyons-css/tachyons
Functional css for humans
CSS★ 11.7K↓ 352K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
JavaScript · Stylus · CSS★ 11.3K↓ 11M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 22.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0