Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,132
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,417 recordsRanked by popularity · browse by tag · record statistics
npm
65Goodhealth index
http-party/http-server
A simple, zero-configuration, command-line http server
JavaScript★ 14.2K↓ 27.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
http-party/node-http-proxy
A full-featured http proxy for node.js
JavaScript★ 14.1K↓ 94.6M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
sivel/speedtest-cli
Command line interface for testing internet bandwidth using speedtest.net
Python★ 14.1K↓ 280.9K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
microsoft/LoRA
Code for loralib, an implementation of "LoRA: Low-Rank Adaptation of Large Language Models"
Python★ 13.8K↓ 217.6K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
66Goodhealth index
graphql/dataloader
DataLoader is a generic utility to be used as part of your application's data fetching layer to provide a consistent API over various backends and reduce requests to those backends via batching and caching.
JavaScript★ 13.4K↓ 49.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
mishoo/UglifyJS
JavaScript parser / mangler / compressor / beautifier toolkit
JavaScript★ 13.4K↓ 175M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
TypeStrong/ts-node
TypeScript execution and REPL for node.js
TypeScript · JavaScript★ 13.1K↓ 183M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
dip/cmdk
Fast, unstyled command menu React component.
TypeScript · SCSS★ 13KSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
asweigart/pyautogui
A cross-platform GUI automation Python module for human beings. Used to programmatically control the mouse & keyboard.
Python★ 12.7K↓ 2.9M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
atomiks/tippyjs
Tooltip, popover, dropdown, and menu library
JavaScript · TypeScript★ 12.2K↓ 24.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
marcotcr/lime
Lime: Explaining the predictions of any machine learning classifier
JavaScript · Python★ 12.2K↓ 452.5K/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
tadata-org/fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Python★ 12K↓ 17M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
karma-runner/karma
Spectacular Test Runner for JavaScript
JavaScript★ 12K↓ 12.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
developit/mitt
🥊 Tiny 200 byte functional event emitter / pubsub.
TypeScript★ 11.9K↓ 118M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
tj/co
The ultimate generator based flow-control goodness for nodejs (supports thunks, promises, etc)
JavaScript★ 11.8K↓ 161M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
seanmonstar/reqwest
An easy and powerful Rust HTTP Client
Rust★ 11.8K↓ 60.6M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
Nozbe/WatermelonDB
🍉 Reactive & asynchronous database for powerful React and React Native apps ⚡️
JavaScript · Objective-C★ 11.8K↓ 226.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
38Weakhealth index
tachyons-css/tachyons
Functional css for humans
CSS★ 11.7K↓ 352K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
JavaScript · Stylus · CSS★ 11.3K↓ 11M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 22.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
JavaScript★ 11.2KSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
54Moderatehealth index
gregberge/svgr
Transform SVGs into React components 🦁
TypeScript · MDX · JavaScript★ 11.1K↓ 282M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
fdehau/tui-rs
Build terminal user interfaces and dashboards using Rust
Rust★ 10.9K↓ 114.9K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
rust-bakery/nom
Rust parser combinator framework
Rust★ 10.5K↓ 52.2M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reactjs/react-transition-group
An easy way to perform animations when a React component enters or leaves the DOM
JavaScript★ 10.2K↓ 197M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
pahen/madge
Create graphs from your CommonJS, AMD or ES6 module dependencies
JavaScript★ 10.2K↓ 11.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
tweenjs/tween.js
JavaScript/TypeScript animation engine
TypeScript · JavaScript★ 10.1K↓ 36M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
senchalabs/connect
Connect is an extensible HTTP server framework for node using "plugins" known as middleware.
JavaScript★ 9,873↓ 74.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
lukeed/clsx
A tiny (239B) utility for constructing `className` strings conditionally.
JavaScript★ 9,839↓ 453M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
pmndrs/use-gesture
👇Bread n butter utility for component-tied mouse/touch gestures in React and Vanilla Javascript.
TypeScript★ 9,621↓ 50M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0