Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,390
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,937 recordsRanked by popularity · browse by tag · record statistics
npm
60Moderatehealth index
FormidableLabs/victory
A collection of composable React components for building interactive data visualizations
TypeScript · MDX · JavaScript★ 11.2K↓ 17M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 22.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
JavaScript★ 11.2KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
54Moderatehealth index
gregberge/svgr
Transform SVGs into React components 🦁
TypeScript · MDX · JavaScript★ 11.1K↓ 282M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
FerretDB/FerretDB
A truly Open Source MongoDB alternative
Go★ 11.1KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
siderolabs/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
Go★ 11KAug 28, 2026
MPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
kkroening/ffmpeg-python
Python bindings for FFmpeg - with complex filtering support
Python★ 11K↓ 9.6M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
jfeinstein10/SlidingMenu
An Android library that allows you to easily create applications with slide-in menus. You may use it in your Android apps provided that you cite this project and include the license in your app. Thanks!
Java★ 11KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
NuGet
32At Riskhealth index
StockSharp/StockSharp
Algorithmic trading and quantitative trading open source platform to develop trading robots (stock markets, forex, crypto, bitcoins, and options).
C#★ 10.9KOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
fdehau/tui-rs
Build terminal user interfaces and dashboards using Rust
Rust★ 10.9K↓ 114.9K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.9KSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
square/javapoet
A Java API for generating .java source files.
Java★ 10.8KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.8K↓ 318M/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Maven
51Moderatehealth index
TooTallNate/Java-WebSocket
A barebones WebSocket client and server implementation written in 100% Java.
Java · HTML★ 10.8KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
facebookresearch/ParlAI
A framework for training and evaluating AI models on a variety of openly available dialogue datasets.
Python★ 10.6KOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reactstrap/reactstrap
Simple React Bootstrap 5 components
JavaScript · TypeScript★ 10.5K↓ 2.5M/moOct 17, 2026
MITOct 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
unovue/shadcn-vue
Vue port of shadcn-ui
TypeScript · Vue★ 10.5K↓ 847.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-bakery/nom
Rust parser combinator framework
Rust★ 10.5K↓ 52.2M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
34At Riskhealth index
sourcegraph/conc
Better structured concurrency for go
Go★ 10.4KAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Python★ 10.4K↓ 1.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
29At Riskhealth index
noisetorch/NoiseTorch
Real-time microphone noise suppression on Linux.
Go · C★ 10.3KAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
—
34At Riskhealth index
wwmm/easyeffects
Limiter, compressor, convolver, equalizer and auto volume and many other plugins for PipeWire applications
HTML · C++ · QML★ 10.2KSep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reactjs/react-transition-group
An easy way to perform animations when a React component enters or leaves the DOM
JavaScript★ 10.2K↓ 197M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
pahen/madge
Create graphs from your CommonJS, AMD or ES6 module dependencies
JavaScript★ 10.2K↓ 11.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
tweenjs/tween.js
JavaScript/TypeScript animation engine
TypeScript · JavaScript★ 10.1K↓ 36M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
stanfordnlp/CoreNLP
CoreNLP: A Java suite of core NLP tools for tokenization, sentence segmentation, NER, parsing, coreference, sentiment analysis, etc.
Java★ 10.1KAug 28, 2026
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Go
19Criticalhealth index
golang/protobuf
Go support for Google's protocol buffers
Go★ 10.1KAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist
33At Riskhealth index
php-fig/container
No repository description published.
PHP★ 9,995↓ 21.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm · PyPI
19Criticalhealth index
microsoft/vscode-copilot-chat
Copilot Chat extension for VS Code
TypeScript★ 9,975↓ 7,611/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Maven
14Criticalhealth index
xuchengsheng/spring-reading
涵盖了 Spring 框架的核心概念和关键功能,包括控制反转(IOC)容器的使用,面向切面编程(AOP)的原理与实践,事务管理的方式与实现,Spring MVC 的流程与控制器工作机制,以及 Spring 中数据访问、安全、Boot 自动配置等方面的深入研究。此外,它还包含了 Spring 事件机制的应用、高级主题如缓存抽象和响应式编程,以及对 Spring 源码的编程风格与设计模式的深入探讨。
Java★ 9,928Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0