Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,793
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,313 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
circus-tent/circus
A Process & Socket Manager built with zmq
Python★ 1,578↓ 472.8K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
expo/react-native-action-sheet
A cross-platform ActionSheet for React Native
TypeScript★ 1,577↓ 1.4M/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
thephpleague/event
Event package for your app and domain
PHP★ 1,570↓ 4.8M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
oxen-io/session-desktop
Session Desktop - Onion routing based messenger [DEPRECATED SEE README]
TypeScript★ 1,569Aug 23, 2026
GPL-3.0Aug 23, 2026 · metrics 2.10.0
npm
36Weakhealth index
jhurliman/node-rate-limiter
A generic rate limiter for node.js. Useful for API clients, web crawling, or other tasks that need to be throttled
TypeScript · JavaScript★ 1,564↓ 63.9M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
mbr/flask-bootstrap
Ready-to-use Twitter-bootstrap for use in Flask.
Python · HTML★ 1,562↓ 557.4K/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
rust-crdt/rust-crdt
a collection of well-tested, serializable CRDTs for Rust
Rust★ 1,546↓ 249.6K/moAug 16, 2026
Apache-2.0Aug 16, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
nithinmurali/pygsheets
Google Sheets Python API v4
Python★ 1,544↓ 2.4M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
watir/watir
Watir Powered By Selenium
Ruby★ 1,544Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
25At Riskhealth index
indutny/node-ip
IP address tools for node.js
JavaScript★ 1,543↓ 36.3M/moAug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
Maven
32At Riskhealth index
wechatpay-apiv3/wechatpay-java
微信支付 APIv3 的官方 Java Library
Java★ 1,538Jul 31, 2026
Apache-2.0Jul 31, 2026 · metrics 2.10.0
PyPI
57Moderatehealth index
Teemu/pytest-sugar
a plugin for py.test that changes the default look and feel of py.test (e.g. progressbar, show tests that fail instantly)
Python★ 1,532↓ 8.5M/moAug 27, 2026
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
Packagist
51Moderatehealth index
thephpleague/plates
Native PHP template system
PHP★ 1,528↓ 125.6K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
ryanto/acts_as_votable
Votable ActiveRecord for Rails
Ruby★ 1,527Jul 27, 2026
No licenseJul 27, 2026 · metrics 2.10.0
npm
27At Riskhealth index
AriaMinaei/pretty-error
See node.js errors with less clutter
CoffeeScript★ 1,524↓ 60.8M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
13Criticalhealth index
composer/package-versions-deprecated
:package: Composer addon to efficiently get installed packages' version numbers
PHP★ 1,521↓ 1.9M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
rq/rq-scheduler
A lightweight library that adds job scheduling capabilities to RQ (Redis Queue)
Python★ 1,516Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
MarkBaker/PHPMatrix
PHP Class for handling Matrices
PHP★ 1,514↓ 9.3M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
33At Riskhealth index
selwin/python-user-agents
A Python library that provides an easy way to identify devices like mobile phones, tablets and their capabilities by parsing (browser) user agent strings.
Python★ 1,513↓ 11M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
mircokroon/minecraft-world-downloader
Download Minecraft worlds, extend server's render distance. 1.12.2 - 1.21
Java★ 1,503Jul 28, 2026
GPL-3.0Jul 28, 2026 · metrics 2.10.0
npm
23At Riskhealth index
ricmoo/aes-js
A pure JavaScript implementation of the AES block cipher and all common modes of operation for node.js or web browsers.
JavaScript★ 1,498↓ 16.1M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
facebook/facebook-sdk-swift
Integrate your iOS apps in Swift with Facebook Platform.
Swift · Shell · Ruby★ 1,497Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
26At Riskhealth index
scottie1984/swagger-ui-express
Adds middleware to your express app to serve the Swagger UI bound to your Swagger document. This acts as living documentation for your API hosted from within your app.
HTML · JavaScript★ 1,497↓ 17.9M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
google/gofuzz
Fuzz testing for go.
Go★ 1,493Jul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 2.10.0
Go
13Criticalhealth index
mitchellh/go-ps
Find, list, and inspect processes from Go (golang).
Go★ 1,491Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
brianmario/yajl-ruby
A streaming JSON parsing and encoding library for Ruby (C bindings to yajl)
C · Ruby★ 1,490Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
slack-notifier/slack-notifier
A simple wrapper for posting to slack channels
Ruby★ 1,490Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
31At Riskhealth index
jimeh/tmuxifier
Tmuxify your Tmux. Powerful session, window & pane management for Tmux.
Shell★ 1,488Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
element-hq/element-desktop
A glossy Matrix collaboration client for desktop.
TypeScript★ 1,487Jul 19, 2026
AGPL-3.0Jul 19, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
CamDavidsonPilon/lifetimes
Lifetime value in Python
Python★ 1,477↓ 239.4K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0