Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,244
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,886 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.9KSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.8K↓ 318M/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
unovue/shadcn-vue
Vue port of shadcn-ui
TypeScript · Vue★ 10.5K↓ 847.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Python★ 10.4K↓ 1.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
34At Riskhealth index
wwmm/easyeffects
Limiter, compressor, convolver, equalizer and auto volume and many other plugins for PipeWire applications
HTML · C++ · QML★ 10.2KSep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pymc-devs/pymc
Bayesian Modeling and Probabilistic Programming in Python
Python★ 9,727↓ 1.9M/moAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
JetBrains/Exposed
Kotlin SQL Framework
Kotlin★ 9,297Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Java★ 9,004Aug 28, 2026
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
thoughtbot/bourbon
A Lightweight Sass Tool Set
Ruby★ 9,004↓ 741.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
Python · JavaScript★ 9,000↓ 9,146/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
anyproto/anytype-ts
Official Anytype client for MacOS, Linux, and Windows
TypeScript★ 8,836Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
eternnoir/pyTelegramBotAPI
Python Telegram bot api.
Python★ 8,779↓ 947.5K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
VowpalWabbit/vowpal_wabbit
Vowpal Wabbit is a machine learning system which pushes the frontier of machine learning with techniques such as online, hashing, allreduce, reductions, learning2search, active, and interactive learning.
C++ · C# · PLSQL★ 8,721↓ 195/moSep 23, 2026
Custom licenseSep 23, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
open-pencil/open-pencil
AI-native design editor. Open-source Figma alternative.
TypeScript★ 8,326↓ 73.6K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
SixLabors/ImageSharp
A modern, cross-platform, 2D Graphics library for .NET
C#★ 8,034Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/pip-tools
A set of tools to keep your pinned Python dependencies fresh.
Python★ 8,008↓ 16.6M/moAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
Laravel-Lang/lang
List of 128 languages for Laravel Framework, Laravel Jetstream, Laravel Fortify, Laravel Breeze, Laravel Cashier, Laravel Nova and Laravel UI.
PHP★ 7,776↓ 522.1K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
34At Riskhealth index
evrone/go-clean-template
Clean Architecture template for Golang services
Go★ 7,662Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nanostores/nanostores
A tiny (340 bytes) state manager for React/RN/Preact/Vue/Svelte with many atomic tree-shakable stores
TypeScript · JavaScript★ 7,581↓ 31.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
swagger-api/swagger-core
Examples and server integrations for generating the Swagger API Specification, which enables easy access to your REST API
Java★ 7,530Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
wiremock/wiremock
A tool for mocking HTTP services
Java★ 7,349Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
19Criticalhealth index
dbgate/dbgate
Database manager for MySQL, PostgreSQL, SQL Server, MongoDB, SQLite and others. Runs under Windows, Linux, Mac or as web application
JavaScript · Svelte · TypeScript★ 7,287↓ 575/moAug 28, 2026
GPL-3.0Aug 28, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
presidentbeef/brakeman
A static analysis security vulnerability scanner for Ruby on Rails applications
Ruby★ 7,264Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
15Criticalhealth index
stefanpenner/es6-promise
A polyfill for ES6-style Promises
JavaScript★ 7,249↓ 71.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
Python · JavaScript★ 7,136Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/size-limit
Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit.
JavaScript★ 7,036Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
sqldelight/sqldelight
SQLDelight - Generates typesafe Kotlin APIs from SQL
Kotlin★ 6,865Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
subzeroid/instagrapi
🔥 The fastest and powerful Python library for Instagram Private API 2026 with HikerAPI SaaS
Python★ 6,812↓ 605.3K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm · Packagist
34At Riskhealth index
humhub/humhub
HumHub is an Open Source Enterprise Social Network. Easy to install, intuitive to use and extendable with countless freely available modules.
PHP★ 6,751Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0