Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,670
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,283 recordsRanked by popularity · browse by tag · record statistics
PyPI
38At riskhealth index
TheKevJames/coveralls-python
Show coverage stats online via coveralls.io
Python★ 569↓ 1.2M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
46At riskhealth index
RDFLib/sparqlwrapper
A wrapper for a remote SPARQL endpoint
Python★ 567↓ 1.3M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
34At riskhealth index
Rel1cx/eslint-react
Composable ESLint rules for React and friends.
TypeScript★ 567↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
NuGet
28Criticalhealth index
xBimTeam/XbimEssentials
A .NET library to work with data in the IFC format. This is the core component of the Xbim Toolkit
C#★ 567Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist · RubyGems
46At riskhealth index
SocialConnect/auth
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
PHP★ 565↓ 18.6K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
49At riskhealth index
lerna-lite/lerna-lite
Subset of Lerna in a much smaller & more modular project. Help manage and publish multiple packages in a monorepo/workspace structure
TypeScript★ 565Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
31At riskhealth index
fastschema/fastschema
All-in-One Backend as a Service with Headless CMS Power
Go★ 563Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
49At riskhealth index
rust-random/getrandom
A small cross-platform library for retrieving random data from (operating) system source
Rust★ 563↓ 155M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
DirectoryTree/ImapEngine
Manage mailboxes using IMAP without the PHP extension
PHP★ 559↓ 43.8K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
pnuckowski/aioresponses
Aioresponses is a helper for mock/fake web requests in python aiohttp package.
Python★ 558↓ 10.2M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
28Criticalhealth index
sebastienros/parlot
Fast and lightweight parser creation tools
C#★ 557Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
21Criticalhealth index
slopus/happy-cli
Happy Coder CLI to connect your local Claude Code to mobile device
TypeScript★ 557Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-diactoros
PSR HTTP Message implementations
PHP★ 553↓ 3.3M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
18Criticalhealth index
KeRNeLith/QuikGraph
Generic Graph Data Structures and Algorithms for .NET
C#★ 549Jul 18, 2026
MS-PLJul 18, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
samdark/sitemap
Sitemap and sitemap index builder
PHP★ 541↓ 18.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
13Criticalhealth index
siberiacancode/reactuse
🌌 reactuse the largest and most useful hook library
TypeScript · JavaScript★ 540↓ 21.1K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
jpvanhal/inflection
A port of Ruby on Rails' inflector to Python
Python★ 525Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
46At riskhealth index
sethvargo/go-githubactions
Go SDK for GitHub Actions - easily author GitHub Actions in Go
Go★ 518Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
php-coveralls/php-coveralls
PHP client library for Coveralls API.
PHP★ 515↓ 209.6K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
brianmario/escape_utils
Faster string escaping routines for your ruby apps
C · Ruby★ 514Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
24Criticalhealth index
judofyr/temple
Template compilation framework in Ruby
Ruby★ 514Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Hex
24Criticalhealth index
erlydtl/erlydtl
Django templates for Erlang
Erlang★ 513↓ 17.6K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
puyuan/py-nanoid
Python Nanoid
Python★ 513Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
vutran1710/PyrateLimiter
⚔️Python Rate-Limiter using Leaky-Bucket Algorithm Family
Python★ 513Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
37At riskhealth index
flant/addon-operator
A system to manage additional components for Kubernetes cluster in a simple, consistent and automated way.
Go★ 509Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
30At riskhealth index
marco-prontera/vite-plugin-css-injected-by-js
A Vite plugin that takes the CSS and adds it to the page through the JS. For those who want a single JS file.
TypeScript · JavaScript★ 505↓ 3.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
33At riskhealth index
harshankur/officeParser
A robust, strictly-typed Node.js and Browser library for parsing office files into a rich Abstract Syntax Tree (AST) and generating high-fidelity output in multiple formats. Parses: docx · pptx · xlsx · odt · odp · ods · pdf · rtf · csv · md · html. Generates: Markdown · HTML · CSV · RTF · PDF · Plain Text · RAG Chunks
Rich Text Format · HTML★ 502↓ 2.1M/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Maven
31At riskhealth index
pdvrieze/xmlutil
XML Serialization library for Kotlin
Kotlin★ 499Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
9Criticalhealth index
Taritsyn/WebMarkupMin
The Web Markup Minifier (abbreviated WebMarkupMin) - a .NET library that contains a set of markup minifiers. The objective of this project is to improve the performance of web applications by reducing the size of HTML, XHTML and XML code.
C#★ 496Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0