Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,547
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,217 recordsRanked by popularity · browse by tag · record statistics
npm
19Criticalhealth index
styleguidist/react-docgen-typescript
A simple parser for react properties defined in typescript instead of propTypes.
TypeScript★ 1,262↓ 66.1M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
DmitryTsepelev/store_model
Work with JSON-backed attributes as ActiveRecord-ish models
Ruby★ 1,232Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
Python★ 1,213↓ 649.5K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
ai/autoprefixer-rails
Autoprefixer for Ruby and Ruby on Rails
Ruby★ 1,210Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Koenkk/zigbee-herdsman-converters
Collection of device converters to be used with zigbee-herdsman
TypeScript★ 1,206↓ 175.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,199↓ 172M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,199Aug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,188↓ 169M/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
Python★ 1,175Aug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
Maven
8Criticalhealth index
mgarin/weblaf
WebLaF is a fully open-source Look & Feel and component library written in pure Java for cross-platform desktop Swing applications.
Java★ 1,174Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 2.10.0
npm
19Criticalhealth index
VKCOM/VKUI
VKUI – это набор React-компонентов, с помощью которых можно создавать интерфейсы, внешне неотличимые от наших iOS и Android приложений.
TypeScript · MDX★ 1,152↓ 59K/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
ncalc/ncalc
NCalc is a fast and lightweight expression evaluator library for .NET, designed for flexibility and high performance. It supports a wide range of mathematical and logical operations.
C#★ 1,142Jul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
PyPI · npm
29At Riskhealth index
ivelum/djangoql
Advanced search language for Django
Python · HTML★ 1,138Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
cataclysmbn/Cataclysm-BN
Cataclysm: Bright Nights: A fork/variant of Cataclysm:DDA by CleverRaven with a mod registry at https://mods.cataclysmbn.org/
C++★ 1,137Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
NuGet
22At Riskhealth index
dadhi/DryIoc
DryIoc is fast, small, full-featured IoC Container for .NET
C#★ 1,128Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytries/marisa-trie
Static memory-efficient Trie-like structures for Python based on marisa-trie C++ library.
Cython · Python★ 1,123Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
patrickhulce/third-party-web
Data on third party entities and their impact on the web.
JavaScript★ 1,107↓ 19.2M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
floere/phony
E164 international phone number normalizing, splitting, formatting.
Ruby★ 1,095Aug 20, 2026
MITAug 20, 2026 · metrics 2.10.0
Go
34At Riskhealth index
werf/nelm
Nelm is a Helm 4 alternative. It is a Kubernetes deployment tool that manages Helm Charts and deploys them to Kubernetes. The Nelm goal is to provide a modern alternative to Helm, with long-standing issues fixed and many new major features introduced.
Go★ 1,094Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
32At Riskhealth index
shashwatak/satellite-js
Modular set of functions for SGP4 and SDP4 propagation of TLE and OMM.
TypeScript · C++★ 1,074↓ 297.5K/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-queue
Yii2 Queue Extension. Supports DB, Redis, RabbitMQ, Beanstalk and Gearman
PHP★ 1,064↓ 248.1K/moJul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
crates.io · npm
34At Riskhealth index
codemod/codemod
The CLI for codemods: scaffold, share, and run multi-step transformations of any size. First-class ast-grep support. Fast, reliable, polyglot.
Rust★ 1,054↓ 1/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
Kotlin/dataframe
Kotlin DataFrame: typesafe in-memory structured data processing for JVM
Kotlin★ 1,052Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
gravity-ui/uikit
No repository description published.
TypeScript · SCSS★ 1,016↓ 83.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
17Criticalhealth index
PAIR-code/what-if-tool
Source code/webpage/demos for the What-If Tool
HTML★ 1,006Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Go · PyPI
34At Riskhealth index
zzet/gortex
High-performance code-intelligence engine for AI agents and IDE, supports 257 languages, multi repositories, based on graph, with access via CLI, MCP Server, and API. AI coding agents teammate - expose only needed information, cutting token usage up to 50x. 100% local. Discord: https://discord.gg/ysC2prTGD
Go★ 999Jul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
axelor/axelor-open-suite
The Axelor Open Suite based on Axelor Open Platform
Java★ 966Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
DelSkayn/rquickjs
High level bindings to the quickjs javascript engine
Rust★ 964↓ 1.6M/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
npm
16Criticalhealth index
grinev/opencode-telegram-bot
OpenCode mobile client via Telegram: run and monitor AI coding tasks from your phone while everything runs locally on your machine. Scheduled tasks support.
TypeScript★ 962↓ 3,767/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0