Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,528
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,217 recordsRanked by popularity · browse by tag · record statistics
npm
12Criticalhealth index
mrmlnc/fast-glob
:rocket: It's a very fast and efficient glob library for Node.js
JavaScript · TypeScript★ 2,821↓ 588M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
34At Riskhealth index
geode-sdk/geode
The ultimate Geometry Dash modding framework
C++★ 2,700Aug 1, 2026
BSL-1.0Aug 1, 2026 · metrics 2.10.0
npm
12Criticalhealth index
js-newbee/taro-yanxuan
首个 Taro 多端统一实例 - 网易严选(小程序 + H5 + React Native) - By 趣店 FED
JavaScript · CSS★ 2,661Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
34At Riskhealth index
divkit/divkit
DivKit is an open source Server-Driven UI (SDUI) framework. SDUI is a an emerging technique that leverage the server to build the user interfaces of their mobile app
Kotlin · Swift★ 2,646Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
symfony/demo
Symfony Demo Application
PHP · Twig★ 2,607↓ 4,037/moAug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
OpenLineage/OpenLineage
An Open Standard for lineage metadata collection
Java · Python★ 2,552Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
TypeScriptToLua/TypeScriptToLua
Typescript to lua transpiler. https://typescripttolua.github.io/
TypeScript★ 2,527↓ 48.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
nunomaduro/termwind
🍃 In short, it's like Tailwind CSS, but for the PHP command-line applications.
PHP★ 2,496↓ 12.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
dipu-bd/lightnovel-crawler
Generate and download e-books from online sources.
Python★ 2,494Jul 18, 2026
GPL-3.0Jul 18, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
premailer/premailer
Preflight for HTML email
Ruby★ 2,415Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
Go
34At Riskhealth index
Kong/kubernetes-ingress-controller
:gorilla: Kong for Kubernetes: The official Ingress Controller for Kubernetes.
Go★ 2,404Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
gotd/td
Telegram client, in Go. (MTProto API)
Go★ 2,288Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Suor/django-cacheops
A slick ORM cache with automatic granular event-driven invalidation.
Python★ 2,274↓ 1.7M/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
ruflin/Elastica
Elastica is a PHP client for elasticsearch
PHP★ 2,270↓ 658.2K/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/hashes
Collection of cryptographic hash functions written in pure Rust
Rust★ 2,257↓ 147M/moAug 22, 2026
No licenseAug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
SergeyPirogov/webdriver_manager
No repository description published.
Python★ 2,184↓ 11.6M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/django-widget-tweaks
Tweak the form field rendering in templates, not in python-level form definitions. CSS classes and HTML attributes can be altered.
Python★ 2,163Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
JetBrains/skiko
Kotlin Multiplatform bindings to Skia
Kotlin · C++★ 2,158Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
12Criticalhealth index
davidbau/seedrandom
seeded random number generator for Javascript
JavaScript · HTML★ 2,131↓ 32.6M/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
26At Riskhealth index
corecoding/Vitals
A glimpse into your computer's temperature, voltage, fan speed, memory usage and CPU load.
JavaScript★ 2,122Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 2.10.0
npm
17Criticalhealth index
msaktype/stylefmt
stylefmt is a tool that automatically formats stylesheets.
JavaScript · CSS★ 2,084Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-random/rand
A Rust library for random number generation.
Rust★ 2,071↓ 138M/moSep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
Go
34At Riskhealth index
go-critic/go-critic
The most opinionated Go source code linter for code audit.
Go★ 2,062Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/framework
High-Performance PHP Framework
PHP★ 2,059↓ 121.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
superglue-ai/superglue
superglue (YC W25) builds integrations and tools from natural language. Get production-grade tools for long tail and enterprise systems.
TypeScript★ 2,053Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
saltcorn/saltcorn
Free and open source no-code application builder
JavaScript · TypeScript★ 2,035↓ 22.3K/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Go
34At Riskhealth index
rabbitmq/amqp091-go
An AMQP 0-9-1 Go client maintained by the RabbitMQ team. Originally by @streadway: `streadway/amqp`
Go★ 2,025Aug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.10.0
npm
32At Riskhealth index
sindresorhus/clipboardy
Access the system clipboard (copy/paste)
JavaScript★ 1,981↓ 31.6M/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
npm
15Criticalhealth index
Starcounter-Jack/JSON-Patch
Lean and mean Javascript implementation of the JSON-Patch standard (RFC 6902). Update JSON documents using delta patches.
JavaScript · TypeScript★ 1,980↓ 32M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
getsentry/sentry-php
The official PHP SDK for Sentry (sentry.io)
PHP★ 1,913↓ 8M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0