Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,083
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,757 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
godotengine/godot
Godot Engine – Multi-platform 2D and 3D game engine
C++★ 117.3KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
facebook/docusaurus
Easy to maintain open source documentation websites.
TypeScript★ 66.3K↓ 34M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/scrapy
Scrapy, a fast high-level web crawling & scraping framework for Python.
Python★ 64.4K↓ 4.6M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
JetBrains/kotlin
The Kotlin Programming Language.
Kotlin★ 53.4KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
MHSanaei/3x-ui
Supporting multi-protocol multi-user(Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto، AmneziaWG)
Go · TypeScript★ 46.5KSep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nolimits4web/swiper
Most modern mobile touch slider with hardware accelerated transitions
TypeScript · JavaScript★ 41.9K↓ 15.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Dokploy/dokploy
Open Source Alternative to Vercel, Netlify and Heroku.
TypeScript★ 37.3KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
RubyGems · crates.io · npm +1
34At Riskhealth index
SeleniumHQ/selenium
A browser automation framework and ecosystem.
Java · C# · JavaScript★ 34.5KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
fabricjs/fabric.js
Javascript Canvas Library, SVG-to-Canvas (& canvas-to-SVG) Parser
TypeScript · JavaScript★ 31.5K↓ 3.5M/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
heroui-inc/heroui
🚀 Beautiful, fast and modern React UI library. (Previously NextUI)
TypeScript · MDX★ 30.7K↓ 3.2M/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss
Transforming styles with JS plugins
TypeScript · JavaScript★ 29K↓ 1.1B/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/nanoid
A tiny (118 bytes), secure, URL-friendly, unique string ID generator for JavaScript
JavaScript★ 27K↓ 909M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
jenkinsci/jenkins
Jenkins automation server
Java★ 26.5KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · Packagist · Maven +2
34At Riskhealth index
google/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
C++ · Rust★ 26.5K↓ 32.8M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
cookiecutter/cookiecutter
A cross-platform command-line utility that creates projects from cookiecutters (project templates), e.g. Python package projects, C projects.
Python★ 25.1K↓ 7.9M/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
highlightjs/highlight.js
JavaScript syntax highlighter with language auto-detection and zero dependencies.
JavaScript · CSS★ 25K↓ 124M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
slopus/happy
Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured
TypeScript★ 23.8K↓ 44.9K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
osquery/osquery
SQL powered operating system instrumentation, monitoring, and analytics.
C++ · C★ 23.6KSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
micro/go-micro
A Go agent harness and service framework
Go★ 23.1KSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
forem/forem
For empowering community 🌱
Ruby · JavaScript · HTML★ 22.8KSep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
svg/svgo
SVG Optimizer for Node.js and CLI. ⚙️
JavaScript★ 22.7K↓ 145M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/autoprefixer
Parse CSS and add vendor prefixes to rules by Can I Use
JavaScript · CSS★ 22.2K↓ 244M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven · npm · RubyGems
34At Riskhealth index
super-productivity/super-productivity
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
TypeScript★ 22.1KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
cube-js/cube
📊 Cube Core is open-source semantic layer for AI, BI and embedded analytics
Rust · TypeScript · MDX★ 20.9K↓ 1.3M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
—
34At Riskhealth index
RPCS3/rpcs3
PlayStation 3 emulator and debugger
C++★ 19.9KSep 24, 2026
GPL-2.0Sep 24, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
lightgbm-org/LightGBM
A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
C++ · Python · R★ 18.8K↓ 19.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
framework7io/framework7
Full featured HTML framework for building iOS & Android apps
JavaScript · Vue · Svelte★ 18.8KSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
lottie-react-native/lottie-react-native
Lottie wrapper for React Native.
TypeScript · Kotlin · Swift★ 17.2K↓ 5.1M/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
less/less.js
Less. The dynamic stylesheet language.
JavaScript · Less★ 17K↓ 40.8M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
cvat-ai/cvat
Computer Vision Annotation Tool (CVAT) is a leading platform for building high-quality visual datasets for vision AI. It offers open-source, cloud, and enterprise products, as well as labeling services, for image, video, and 3D annotation with AI-assisted labeling, quality assurance, team collaboration, analytics, and developer APIs.
Python · TypeScript · JavaScript★ 16.7K↓ 86K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0