Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,109
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
598 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
webpack/postcss-loader
PostCSS loader for webpack
JavaScript★ 2,841↓ 70M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
34At Riskhealth index
geode-sdk/geode
The ultimate Geometry Dash modding framework
C++★ 2,838Sep 15, 2026
BSL-1.0Sep 15, 2026 · metrics 2.10.0
npm
15Criticalhealth index
mrmlnc/fast-glob
:rocket: It's a very fast and efficient glob library for Node.js
JavaScript · TypeScript★ 2,823↓ 573M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
symfony/demo
Symfony Demo Application
PHP · Twig★ 2,618↓ 4,759/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Suor/django-cacheops
A slick ORM cache with automatic granular event-driven invalidation.
Python★ 2,273↓ 1.9M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/django-widget-tweaks
Tweak the form field rendering in templates, not in python-level form definitions. CSS classes and HTML attributes can be altered.
Python★ 2,163↓ 1.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
ogen-go/ogen
OpenAPI v3 code generator for go
Go · Go Template★ 2,141Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
34At Riskhealth index
go-critic/go-critic
The most opinionated Go source code linter for code audit.
Go★ 2,068Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven · RubyGems
34At Riskhealth index
mastodon/mastodon-android
Official Android app for Mastodon
Java★ 2,042Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
31At Riskhealth index
sindresorhus/clipboardy
Access the system clipboard (copy/paste)
JavaScript★ 1,983↓ 30.7M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
8Criticalhealth index
shuchkin/simplexlsx
Parse and retrieve data from Excel XLSx files
PHP★ 1,829↓ 164.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io · Go · PyPI
34At Riskhealth index
dfinity/ic
Internet Computer blockchain source: the client/replica software run by nodes
Rust★ 1,792↓ 53K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
28At Riskhealth index
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
JavaScript★ 1,751↓ 859M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nginx/njs
A subset of JavaScript language to use in nginx
C · Perl★ 1,599Sep 15, 2026
BSD-2-ClauseSep 15, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
tafia/quick-xml
Rust high performance xml reader and writer
Rust★ 1,567↓ 36.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
scalameta/scalafmt
Code formatter for Scala
Scala★ 1,489Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
sculpin/sculpin
Sculpin — Static Site Generator
PHP★ 1,484↓ 2,020/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mosquito/aio-pika
AMQP 0.9 client designed for asyncio and humans.
Python★ 1,477↓ 6.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
psd-tools/psd-tools
Python package for reading Adobe Photoshop PSD files
Python★ 1,461Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/parsel
Parsel lets you extract data from XML/HTML documents using XPath or CSS selectors
Python★ 1,354↓ 4.7M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
12Criticalhealth index
caiiiycuk/js-dos
The best API for running dos programs in browser
TypeScript · JavaScript★ 1,336↓ 4,408/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
RubyGems
15Criticalhealth index
DmitryTsepelev/store_model
Work with JSON-backed attributes as ActiveRecord-ish models
Ruby★ 1,232Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
Python★ 1,212↓ 649.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,211↓ 169M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,198↓ 154M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,198Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
Python★ 1,175Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
VKCOM/VKUI
VKUI – это набор React-компонентов, с помощью которых можно создавать интерфейсы, внешне неотличимые от наших iOS и Android приложений.
TypeScript · MDX★ 1,161↓ 51.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
solod-dev/solod
A subset of Go that translates to C
Go★ 1,161Sep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0