Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,324
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,002 recordsRanked by popularity · browse by tag · record statistics
PyPI · npm
34At Riskhealth index
LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
Python · JavaScript★ 9,000↓ 9,146/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
57Moderatehealth index
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
JavaScript★ 8,998↓ 13.6M/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
pygame/pygame
🐍🎮 pygame (the library) is a Free and Open Source python programming language library for making multimedia applications like games built on top of the excellent SDL library. C, Python, Native, OpenGL.
C · Python★ 8,907Aug 28, 2026
No licenseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
JavaScript★ 8,855↓ 722M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Python★ 8,853Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
22At Riskhealth index
patrickmn/go-cache
An in-memory key:value store/cache (similar to Memcached) library for Go, suitable for single-machine applications.
Go★ 8,844Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
anyproto/anytype-ts
Official Anytype client for MacOS, Linux, and Windows
TypeScript★ 8,836Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
eternnoir/pyTelegramBotAPI
Python Telegram bot api.
Python★ 8,779↓ 947.5K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
VowpalWabbit/vowpal_wabbit
Vowpal Wabbit is a machine learning system which pushes the frontier of machine learning with techniques such as online, hashing, allreduce, reductions, learning2search, active, and interactive learning.
C++ · C# · PLSQL★ 8,721↓ 195/moSep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
aws/aws-sdk-go
This SDK has reached end-of-support. The AWS SDK for Go v2 is available here: https://github.com/aws/aws-sdk-go-v2
Go★ 8,675Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
kaminari/kaminari
⚡ A Scope & Engine based, clean, powerful, customizable and sophisticated paginator for Ruby webapps
Ruby★ 8,672Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
santinic/audiblez
Generate audiobooks from e-books
Python★ 8,635↓ 1,012/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Hopding/pdf-lib
Create and modify PDF documents in any JavaScript environment
TypeScript★ 8,634↓ 45.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
emilkowalski/vaul
A drawer component for React.
TypeScript★ 8,615↓ 136M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
22At Riskhealth index
hexgrad/kokoro
https://hf.co/hexgrad/Kokoro-82M
JavaScript · Python★ 8,585↓ 1.4M/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · Maven
30At Riskhealth index
DylanVann/react-native-fast-image
🚩 FastImage, performant React Native image component.
TypeScript · Java · Objective-C★ 8,420↓ 558.5K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
29At Riskhealth index
smartystreets/goconvey
Go testing in the browser. Integrates with `go test`. Write behavioral tests in Go.
Go · JavaScript · CSS★ 8,406Sep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
paritytech/substrate
Substrate: The platform for blockchain innovators
Rust★ 8,382↓ 1,672/moOct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
XPixelGroup/BasicSR
Open Source Image and Video Restoration Toolbox for Super-resolution, Denoise, Deblurring, etc. Currently, it includes EDSR, RCAN, SRResNet, SRGAN, ESRGAN, EDVR, BasicVSR, SwinIR, ECBSR, etc. Also support StyleGAN2, DFDNet.
Python★ 8,381Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
53Moderatehealth index
traefik/yaegi
Yaegi is Another Elegant Go Interpreter
Go★ 8,378Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
open-pencil/open-pencil
AI-native design editor. Open-source Figma alternative.
TypeScript★ 8,326↓ 73.6K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
remix-run/history
Manage session history with JavaScript
JavaScript · TypeScript★ 8,299↓ 44.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
graphql-python/graphene
GraphQL framework for Python
Python★ 8,238↓ 41.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
zilliztech/GPTCache
Semantic cache for LLMs. Fully integrated with LangChain and llama_index.
Python★ 8,192Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
soldair/node-qrcode
qr code generator
JavaScript★ 8,174↓ 85.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
MagicStack/asyncpg
A fast PostgreSQL Database Client Library for Python/asyncio.
Python · Cython★ 8,088Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
php-fig/simple-cache
No repository description published.
PHP★ 8,075↓ 17.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
SixLabors/ImageSharp
A modern, cross-platform, 2D Graphics library for .NET
C#★ 8,034Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Go
17Criticalhealth index
mitchellh/mapstructure
Go library for decoding generic map values into native Go structures and vice versa.
Go★ 8,025Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/pip-tools
A set of tools to keep your pinned Python dependencies fresh.
Python★ 8,008↓ 16.6M/moAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0