Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,208
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,886 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
godotengine/godot
Godot Engine – Multi-platform 2D and 3D game engine
C++★ 117.3KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
facebook/docusaurus
Easy to maintain open source documentation websites.
TypeScript★ 66.3K↓ 34M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/scrapy
Scrapy, a fast high-level web crawling & scraping framework for Python.
Python★ 64.4K↓ 4.6M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
lodash/lodash
A modern JavaScript utility library delivering modularity, performance, & extras.
JavaScript★ 61.3K↓ 640M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
JetBrains/kotlin
The Kotlin Programming Language.
Kotlin★ 53.4KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
calcom/cal.diy
Scheduling infrastructure for absolutely everyone.
TypeScript★ 48.5KSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
MHSanaei/3x-ui
Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)
Go · TypeScript★ 46.5KSep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm · crates.io · PyPI
19Criticalhealth index
janhq/jan
Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.
Rust · TypeScript★ 45KOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nolimits4web/swiper
Most modern mobile touch slider with hardware accelerated transitions
TypeScript · JavaScript★ 41.9K↓ 15.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
yarnpkg/yarn
The 1.x line is frozen - features and bugfixes now happen on https://github.com/yarnpkg/berry
JavaScript★ 41.5K↓ 33.5M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Dokploy/dokploy
Open Source Alternative to Vercel, Netlify and Heroku.
TypeScript★ 37.3KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
RubyGems · crates.io · npm +1
34At Riskhealth index
SeleniumHQ/selenium
A browser automation framework and ecosystem.
Java · C# · JavaScript★ 34.5KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
fabricjs/fabric.js
Javascript Canvas Library, SVG-to-Canvas (& canvas-to-SVG) Parser
TypeScript · JavaScript★ 31.5K↓ 3.5M/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
heroui-inc/heroui
🚀 Beautiful, fast and modern React UI library. (Previously NextUI)
TypeScript · MDX★ 30.7K↓ 3.2M/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss
Transforming styles with JS plugins
TypeScript · JavaScript★ 29K↓ 1.1B/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
mobxjs/mobx
Simple, scalable state management.
TypeScript · JavaScript★ 28.2K↓ 39.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/nanoid
A tiny (118 bytes), secure, URL-friendly, unique string ID generator for JavaScript
JavaScript★ 27K↓ 909M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
jenkinsci/jenkins
Jenkins automation server
Java★ 26.5KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · Packagist · Maven +2
34At Riskhealth index
google/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
C++ · Rust★ 26.5K↓ 32.8M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
cookiecutter/cookiecutter
A cross-platform command-line utility that creates projects from cookiecutters (project templates), e.g. Python package projects, C projects.
Python★ 25.1K↓ 7.9M/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
highlightjs/highlight.js
JavaScript syntax highlighter with language auto-detection and zero dependencies.
JavaScript · CSS★ 25K↓ 124M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
—
19Criticalhealth index
simdjson/simdjson
Parsing gigabytes of JSON per second : used by Facebook/Meta Velox, the Node.js runtime, ClickHouse, WatermelonDB, Apache Doris, Milvus, StarRocks
C++★ 24.3KSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
slopus/happy
Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured
TypeScript★ 23.8K↓ 44.9K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
osquery/osquery
SQL powered operating system instrumentation, monitoring, and analytics.
C++ · C★ 23.6KSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
micro/go-micro
A Go agent harness and service framework
Go★ 23.1KSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
forem/forem
For empowering community 🌱
Ruby · JavaScript · HTML★ 22.8KSep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
svg/svgo
SVG Optimizer for Node.js and CLI. ⚙️
JavaScript★ 22.7K↓ 145M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven · npm
19Criticalhealth index
thingsboard/thingsboard
Open-source IoT Platform - Device management, data collection, processing and visualization.
Java · TypeScript★ 22.4KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/autoprefixer
Parse CSS and add vendor prefixes to rules by Can I Use
JavaScript · CSS★ 22.2K↓ 244M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven · npm · RubyGems
34At Riskhealth index
super-productivity/super-productivity
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
TypeScript★ 22.1KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0