Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,830
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,990 recordsRanked by popularity · browse by tag · record statistics
npm
31At Riskhealth index
developit/web-worker
Consistent Web Workers in browser and Node.
JavaScript★ 1,174↓ 30.4M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
12Criticalhealth index
rocicorp/replicache
Realtime Sync for Any Backend Stack
Mixed★ 1,174Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Go
25At Riskhealth index
Code-Hex/pget
The fastest, resumable file download client
Go★ 1,173Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
29At Riskhealth index
lukeed/sirv
An optimized middleware & CLI application for serving static files~!
JavaScript★ 1,173↓ 142M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
moxystudio/node-cross-spawn
A cross platform solution to node's spawn and spawnSync
JavaScript★ 1,171↓ 909M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
60Moderatehealth index
DevCloudFE/vue-devui
UI components based on Vue3 and DevUI Design
TypeScript · SCSS★ 1,169↓ 11.3K/moOct 17, 2026
MITOct 17, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
GaParmar/clean-fid
PyTorch - FID calculation with proper image resizing and quantization steps [CVPR 2022]
Python★ 1,169Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
iver56/torch-audiomentations
Fast audio data augmentation in PyTorch. Inspired by audiomentations. Useful for deep learning.
Python★ 1,168Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
callstack/masked-view
React Native Masked View Library
JavaScript · Java · Objective-C★ 1,167Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
carmen-ruby/carmen
A repository of geographic regions for Ruby
Ruby★ 1,167Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
26At Riskhealth index
geraintluff/tv4
Tiny Validator for JSON Schema v4
JavaScript★ 1,165↓ 11M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
kbandla/dpkt
fast, simple packet creation / parsing, with definitions for the basic TCP/IP protocols
Python★ 1,163Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
VKCOM/VKUI
VKUI – это набор React-компонентов, с помощью которых можно создавать интерфейсы, внешне неотличимые от наших iOS и Android приложений.
TypeScript · MDX★ 1,161↓ 51.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
solod-dev/solod
A subset of Go that translates to C
Go★ 1,161Sep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
ncalc/ncalc
NCalc is a fast and lightweight expression evaluator library for .NET, designed for flexibility and high performance. It supports a wide range of mathematical and logical operations.
C#★ 1,158Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
15Criticalhealth index
grinev/opencode-telegram-bot
OpenCode mobile client via Telegram: run and monitor AI coding tasks from your phone while everything runs locally on your machine. Scheduled tasks support.
TypeScript★ 1,153↓ 4,289/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jsocol/django-ratelimit
Cache-based rate-limiting for Django
Python★ 1,148Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
james2m/seedbank
Seedbank gives your seed data a little structure. Create seeds for each environment, share seeds between environments and specify dependencies to load your seeds in order. All nicely integrated with simple rake tasks.
Ruby★ 1,145Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
21At Riskhealth index
iancoleman/strcase
A golang package for converting to snake_case or CamelCase
Go★ 1,143Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
nikic/iter
Iteration primitives using generators
PHP★ 1,141↓ 148.3K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
PyPI · npm
33At Riskhealth index
ivelum/djangoql
Advanced search language for Django
Python · HTML★ 1,139Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
mattphillips/deep-object-diff
Deep diffs two objects, including nested structures of arrays and objects, and returns the difference. ❄️
JavaScript★ 1,139↓ 16.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
uiri/toml
Python lib for TOML
Python★ 1,137↓ 136M/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
diyan/pywinrm
Python library for Windows Remote Management (WinRM)
Python★ 1,135↓ 6.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
NuGet
28At Riskhealth index
dadhi/DryIoc
DryIoc is fast, small, full-featured IoC Container for .NET
C#★ 1,131Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
35Weakhealth index
peterolson/BigInteger.js
An arbitrary length integer library for Javascript
JavaScript★ 1,126↓ 138M/moSep 17, 2026
UnlicenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytries/marisa-trie
Static memory-efficient Trie-like structures for Python based on marisa-trie C++ library.
Cython · Python★ 1,124↓ 2.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
upserve/docker-api
A lightweight Ruby client for the Docker Remote API
Ruby★ 1,124Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
huacnlee/rails-settings-cached
Global settings for your Rails application.
Ruby★ 1,122Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0