Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,730
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,447 recordsRanked by popularity · browse by tag · record statistics
PyPI
27At Riskhealth index
DenisCarriere/geocoder
:earth_asia: Python Geocoder
Python★ 1,655Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
32At Riskhealth index
avkonst/hookstate
The simple but very powerful and incredibly fast state management for React that is based on hooks
TypeScript★ 1,655↓ 387.7K/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
rwightman/efficientdet-pytorch
A PyTorch impl of EfficientDet faithful to the original Google impl w/ ported weights
Python★ 1,654↓ 542.8K/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
19Criticalhealth index
corona-warn-app/cwa-app-ios
Native iOS app using the exposure notification framework from Apple. The CWA development ends on May 31, 2023. You still can warn other users until April 30, 2023. More information:
Swift★ 1,652Aug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.10.0
PyPI
36Weakhealth index
mortada/fredapi
Python API for FRED (Federal Reserve Economic Data) and ALFRED (Archival FRED)
Python★ 1,650Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
32At Riskhealth index
lelylan/simple-oauth2
A simple Node.js client library for Oauth2
JavaScript★ 1,645↓ 3M/moAug 27, 2026
No licenseAug 27, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
java-json-tools/json-schema-validator
A JSON Schema validation implementation in pure Java, which aims for correctness and performance, in that order
Java★ 1,644Aug 21, 2026
Custom licenseAug 21, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
breuleux/jurigged
Hot reloading for Python
Python★ 1,641↓ 573.3K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pixelb/ps_mem
A utility to accurately report the in core memory usage for a program
Python★ 1,636↓ 1.4M/moAug 13, 2026
LGPL-2.1Aug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/nanoevents
Simple and tiny (107 bytes) event emitter library for JavaScript
TypeScript · JavaScript★ 1,635↓ 4.4M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
datamade/usaddress
:us: a python library for parsing unstructured United States address strings into address components
Python★ 1,633Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
60Moderatehealth index
facebookincubator/submitit
Python 3.8+ toolbox for submitting jobs to Slurm
Python★ 1,630Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
36Weakhealth index
jorgebucaran/colorette
🌈Easily set your terminal text color & styles
JavaScript★ 1,625↓ 301M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
51Moderatehealth index
f/mcptools
A command-line interface for interacting with MCP (Model Context Protocol) servers using both stdio and HTTP transport.
Go★ 1,622Sep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
npm
32At Riskhealth index
d3/d3-scale
Encodings that map abstract data to visual representation.
JavaScript★ 1,615↓ 287M/moAug 13, 2026
ISCAug 13, 2026 · metrics 2.10.0
Packagist
48Weakhealth index
minkphp/Mink
PHP web browser emulator abstraction
PHP★ 1,611↓ 1.3M/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
RubyGems
18Criticalhealth index
chriskite/anemone
Anemone web-spider framework
Ruby★ 1,602Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
interactivethings/catalog
Create living style guides using Markdown or React
JavaScript · TypeScript★ 1,601↓ 4,545/moJul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
litl/rauth
A Python library for OAuth 1.0/a, 2.0, and Ofly.
Python★ 1,600Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
mark3labs/mcphost
A CLI host application that enables Large Language Models (LLMs) to interact with external tools through the Model Context Protocol (MCP).
Go★ 1,598Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
jfelchner/ruby-progressbar
Ruby/ProgressBar is a text progress bar library for Ruby.
Ruby★ 1,597Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
cgarciae/pypeln
Concurrent data pipelines in Python >>>
Python★ 1,596Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
os/slacker
Full-featured Python interface for the Slack API
Python★ 1,588↓ 436K/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
45Weakhealth index
alibaba/Pai-Megatron-Patch
The official repo of Pai-Megatron-Patch for LLM & VLM large scale training developed by Alibaba Cloud.
Python★ 1,586Jul 31, 2026
Apache-2.0Jul 31, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
cruft/cruft
Allows you to maintain all the necessary cruft for packaging and building projects separate from the code you intentionally write. Built on-top of, and fully compatible with, CookieCutter.
Python★ 1,582Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
circus-tent/circus
A Process & Socket Manager built with zmq
Python★ 1,578↓ 472.8K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
expo/react-native-action-sheet
A cross-platform ActionSheet for React Native
TypeScript★ 1,577↓ 1.4M/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
thephpleague/event
Event package for your app and domain
PHP★ 1,570↓ 4.8M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
oxen-io/session-desktop
Session Desktop - Onion routing based messenger [DEPRECATED SEE README]
TypeScript★ 1,569Aug 23, 2026
GPL-3.0Aug 23, 2026 · metrics 2.10.0
npm
36Weakhealth index
jhurliman/node-rate-limiter
A generic rate limiter for node.js. Useful for API clients, web crawling, or other tasks that need to be throttled
TypeScript · JavaScript★ 1,564↓ 63.9M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0