Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,171
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,378 recordsRanked by popularity · browse by tag · record statistics
npm
46Weakhealth index
gulpjs/vinyl
Virtual file format.
JavaScript★ 1,294↓ 32.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
40Weakhealth index
liady/webpack-node-externals
Easily exclude node modules in Webpack
JavaScript★ 1,293↓ 41.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
mb21/panwriter
Markdown editor with pandoc integration and paginated preview.
TypeScript · CSS★ 1,293Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
27At Riskhealth index
felixge/node-dateformat
A node.js package for Steven Levithan's excellent dateFormat() function.
JavaScript★ 1,292↓ 113M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
vercel/arg
Simple argument parsing
JavaScript★ 1,292↓ 369M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
nicodv/kmodes
Python implementations of the k-modes and k-prototypes clustering algorithms, for clustering categorical data
Python★ 1,285↓ 350.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
koalalorenzo/python-digitalocean
🐍🐳 Python module to manage Digital Ocean droplets
Python★ 1,284↓ 154K/moSep 17, 2026
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mikeal/watch
Utilities for watching file trees in node.js
JavaScript · Shell★ 1,279↓ 3M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
d3/d3-hierarchy
2D layout algorithms for visualizing hierarchical data.
JavaScript★ 1,273↓ 92.2M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
styleguidist/react-docgen-typescript
A simple parser for react properties defined in typescript instead of propTypes.
TypeScript★ 1,266↓ 69M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
42Weakhealth index
gopeak/dectask
简单高效、基于敏捷开发的项目管理工具
JavaScript · PHP · Twig★ 1,264Sep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
27At Riskhealth index
tim-kos/node-retry
Abstraction for exponential and custom retry strategies for failed operations.
JavaScript★ 1,258↓ 408M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
48Weakhealth index
TypeScript★ 1,258↓ 106M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
arcanis/clipanion
Type-safe CLI library / framework with no runtime dependencies
TypeScript★ 1,257↓ 18.3M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
npkgz/cli-progress
:hourglass: easy to use progress-bar for command-line/terminal applications
JavaScript★ 1,256↓ 40M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
redis/redis-om-node
Object mapping, and more, for Redis and Node.js. Written in TypeScript.
TypeScript★ 1,256↓ 126.1K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
VainF/pytorch-msssim
Fast and differentiable MS-SSIM and SSIM for pytorch.
Python★ 1,253Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
20At Riskhealth index
developit/dlv
Safe deep property access in 120 bytes. x = dlv(obj, 'a.b.x')
JavaScript★ 1,251↓ 153M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
google/textfsm
Python module for parsing semi-structured text into python tables.
Python★ 1,248↓ 1.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
davidbonnet/astring
🌳 Tiny and fast JavaScript code generator from an ESTree-compliant AST.
JavaScript★ 1,247↓ 84.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
Polymarket/py-clob-client
Python client for the Polymarket CLOB
Python★ 1,231↓ 459.3K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
22At Riskhealth index
JavaScript★ 1,229↓ 130M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
kudobuilder/kudo
Kubernetes Universal Declarative Operator (KUDO)
Go★ 1,214Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
arundo/adtk
A Python toolkit for rule-based/unsupervised anomaly detection in time series
Python★ 1,211Sep 17, 2026
MPL-2.0Sep 17, 2026 · metrics 2.10.0
npm
35Weakhealth index
TritonDataCenter/node-verror
Rich JavaScript errors
JavaScript · Makefile★ 1,189Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
SukkaW/nolyfill
Speed up your package installation process, reduce your disk usage, and extend the lifespan of your precious SSD.
TypeScript · JavaScript★ 1,186Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
40Weakhealth index
pmndrs/its-fine
🐶🔥 A collection of escape hatches for React.
TypeScript★ 1,183↓ 25.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0