Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,117
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,140 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
godotengine/godot
Godot Engine – Multi-platform 2D and 3D game engine
C++★ 115.1KAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
facebook/docusaurus
Easy to maintain open source documentation websites.
TypeScript★ 65.8K↓ 33.2M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/scrapy
Scrapy, a fast high-level web crawling & scraping framework for Python.
Python★ 63.8KAug 12, 2026
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
JetBrains/kotlin
The Kotlin Programming Language.
Kotlin★ 53.3KAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
MHSanaei/3x-ui
Xray panel supporting multi-protocol multi-user expire day & traffic & IP limit (Vmess, Vless, Trojan, ShadowSocks, Wireguard, Hysteria, Tunnel, Mixed, HTTP, Tun, MTProto)
Go · TypeScript★ 44.2KAug 5, 2026
GPL-3.0Aug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nolimits4web/swiper
Most modern mobile touch slider with hardware accelerated transitions
TypeScript · JavaScript★ 41.9K↓ 17.1M/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
RubyGems · crates.io · npm +1
34At Riskhealth index
SeleniumHQ/selenium
A browser automation framework and ecosystem.
Java · C# · C++★ 34.3KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss
Transforming styles with JS plugins
TypeScript · JavaScript★ 29K↓ 1.1B/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/nanoid
A tiny (118 bytes), secure, URL-friendly, unique string ID generator for JavaScript
JavaScript★ 26.9K↓ 922M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
jenkinsci/jenkins
Jenkins automation server
Java★ 26.4KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm · Packagist · Maven +2
34At Riskhealth index
google/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
C++ · Rust★ 26.3K↓ 31M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
cookiecutter/cookiecutter
A cross-platform command-line utility that creates projects from cookiecutters (project templates), e.g. Python package projects, C projects.
Python★ 25KAug 5, 2026
BSD-3-ClauseAug 5, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
highlightjs/highlight.js
JavaScript syntax highlighter with language auto-detection and zero dependencies.
JavaScript · CSS★ 25K↓ 120M/moAug 12, 2026
BSD-3-ClauseAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
osquery/osquery
SQL powered operating system instrumentation, monitoring, and analytics.
C++ · C★ 23.5KAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
slopus/happy
Mobile and Web client for Codex and Claude Code, with realtime voice, encryption and fully featured
TypeScript★ 23.1K↓ 38.2K/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Go
34At Riskhealth index
micro/go-micro
A Go agent harness and service framework
Go · Shell★ 23KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
forem/forem
For empowering community 🌱
Ruby · JavaScript · HTML★ 22.8KAug 5, 2026
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
svg/svgo
SVG Optimizer for Node.js and CLI. ⚙️
JavaScript★ 22.6K↓ 150M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/autoprefixer
Parse CSS and add vendor prefixes to rules by Can I Use
JavaScript · CSS★ 22.3K↓ 262M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Maven · npm · RubyGems
34At Riskhealth index
super-productivity/super-productivity
Super Productivity is an advanced todo list app with integrated Timeboxing and time tracking capabilities. It also comes with integrations for Jira, GitLab, GitHub and Open Project.
TypeScript★ 21.1KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
cube-js/cube
📊 Cube Core is open-source semantic layer for AI, BI and embedded analytics
Rust · TypeScript · MDX★ 20.5K↓ 1.7M/moAug 5, 2026
Custom licenseAug 5, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
lightgbm-org/LightGBM
A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
C++ · Python · R★ 18.7KAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
npm
34At Riskhealth index
less/less.js
Less. The dynamic stylesheet language.
JavaScript · Less★ 17K↓ 46.7M/moAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
clap-rs/clap
A full featured, fast Command Line Argument Parser for Rust
Rust★ 16.6K↓ 256M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aio-libs/aiohttp
Asynchronous HTTP client/server framework for asyncio and Python
Python★ 16.5KAug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
piskvorky/gensim
Topic Modelling for Humans
Python★ 16.5KAug 5, 2026
LGPL-2.1Aug 5, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
cvat-ai/cvat
Computer Vision Annotation Tool (CVAT) is a leading platform for building high-quality visual datasets for vision AI. It offers open-source, cloud, and enterprise products, as well as labeling services, for image, video, and 3D annotation with AI-assisted labeling, quality assurance, team collaboration, analytics, and developer APIs.
Python · TypeScript · JavaScript★ 16.5K↓ 105.1K/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
treeverse/dvc
🦉 Data Versioning and ML Experiments
Python★ 15.8KAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Chocobozzz/PeerTube
ActivityPub-federated video streaming platform using P2P directly in your web browser
TypeScript★ 15.2K↓ 1,270/moAug 5, 2026
AGPL-3.0Aug 5, 2026 · metrics 2.10.0
PyPI · npm · Go +2
28At Riskhealth index
alphacep/vosk-api
Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node
Jupyter Notebook★ 15K↓ 776.1K/moAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0