Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,830
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,990 recordsRanked by popularity · browse by tag · record statistics
Go
34At Riskhealth index
kudobuilder/kudo
Kubernetes Universal Declarative Operator (KUDO)
Go★ 1,214Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
Python★ 1,212↓ 649.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
arundo/adtk
A Python toolkit for rule-based/unsupervised anomaly detection in time series
Python★ 1,211Sep 17, 2026
MPL-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,211↓ 169M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
RubyGems · npm
28At Riskhealth index
ai/autoprefixer-rails
Autoprefixer for Ruby and Ruby on Rails
Ruby★ 1,210Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
floating/frame
System-wide Web3 for macOS, Windows and Linux
JavaScript · TypeScript · Stylus★ 1,210Oct 20, 2026
GPL-3.0Oct 20, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
jmrozanec/cron-utils
Cron utils for parsing, validations and human readable descriptions as well as date/time interoperability.
Java★ 1,210Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
45Weakhealth index
uber-go/multierr
Combine one or more Go errors together
Go★ 1,207Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
WestHealth/pyvis
Python package for creating and visualizing interactive network graphs.
HTML★ 1,206↓ 1.7M/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
23At Riskhealth index
tmux-plugins/tmux-copycat
A plugin that enhances tmux search
Shell★ 1,206Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
40Weakhealth index
MagicStack/immutables
A high-performance immutable mapping type for Python.
C · Python★ 1,203Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,198↓ 154M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
30At Riskhealth index
shurcooL/githubv4
Package githubv4 is a client library for accessing GitHub GraphQL API v4 (https://docs.github.com/en/graphql).
Go★ 1,198Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,198Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
reo7sp/tgbot-cpp
C++ library for Telegram bot API
C++★ 1,194Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
PythonCharmers/python-future
Easy, clean, reliable Python 2/3 compatibility
Python★ 1,192Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
crates.io
36Weakhealth index
TeXitoi/keyberon
A rust crate to create a pure rust keyboard firmware.
Rust★ 1,191↓ 113/moOct 12, 2026
MITOct 12, 2026 · metrics 2.10.0
npm
35Weakhealth index
TritonDataCenter/node-verror
Rich JavaScript errors
JavaScript · Makefile★ 1,189Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
57Moderatehealth index
email-spec/email-spec
Collection of RSpec/MiniTest matchers and Cucumber steps for testing email in a ruby app using ActionMailer or Pony
Ruby★ 1,188Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
25At Riskhealth index
SukkaW/nolyfill
Speed up your package installation process, reduce your disk usage, and extend the lifespan of your precious SSD.
TypeScript · JavaScript★ 1,186Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
bernat/best_in_place
A RESTful unobtrusive jQuery Inplace-Editor and a helper as a Rails Gem
Ruby · HTML · JavaScript★ 1,185Oct 3, 2026
No licenseOct 3, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
chakki-works/seqeval
A Python framework for sequence labeling evaluation(named-entity recognition, pos tagging, etc...)
Python · Perl★ 1,185Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
19Criticalhealth index
aliyun/alibaba-cloud-sdk-go
The Alibaba Cloud V1.0 Go SDK has entered End-of-Support (March 1, 2025) and is no longer recommended for use. V2.0 SDK is available here: https://github.com/alibabacloud-go
Go★ 1,183Sep 23, 2026
Apache-2.0Sep 23, 2026 · metrics 2.10.0
npm
40Weakhealth index
pmndrs/its-fine
🐶🔥 A collection of escape hatches for React.
TypeScript★ 1,183↓ 25.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
marnusw/date-fns-tz
Complementary library for date-fns v2 adding IANA time zone support
JavaScript · TypeScript★ 1,180↓ 42.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
—
25At Riskhealth index
discord/discord-rpc
No repository description published.
C++ · Python★ 1,178Sep 25, 2026
MITSep 25, 2026 · metrics 2.10.0
Maven
8Criticalhealth index
mgarin/weblaf
WebLaF is a fully open-source Look & Feel and component library written in pure Java for cross-platform desktop Swing applications.
Java★ 1,178Sep 12, 2026
GPL-3.0Sep 12, 2026 · metrics 2.10.0
—
18Criticalhealth index
denisbrodbeck/machineid
Get the unique machine id of any host (without admin privileges)
Go★ 1,176Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
pages-themes/hacker
Hacker is a Jekyll theme for GitHub Pages
SCSS · HTML · Ruby★ 1,175Sep 10, 2026
CC0-1.0Sep 10, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
Python★ 1,175Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0