Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,132
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,417 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
Oneflow-Inc/oneflow
OneFlow is a deep learning framework designed to be user-friendly, scalable and efficient.
C++ · Python · Cuda★ 9,436Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
swiftmailer/swiftmailer
Comprehensive mailing tools for PHP
PHP★ 9,426↓ 2.1M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
32At Riskhealth index
terkelg/prompts
❯ Lightweight, beautiful and user-friendly interactive prompts
JavaScript★ 9,313↓ 225M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
node-schedule/node-schedule
A cron-like and not-cron-like job scheduler for Node.
JavaScript★ 9,204↓ 15.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
olivernn/lunr.js
A bit like Solr, but much smaller and not as bright
JavaScript★ 9,202↓ 28M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
FriendsOfPHP/Goutte
Goutte, a simple PHP Web Scraper
PHP★ 9,187↓ 237.9K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mrdoob/stats.js
JavaScript Performance Monitor
JavaScript★ 9,151↓ 14.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
57Moderatehealth index
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
JavaScript★ 8,998↓ 13.6M/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
JavaScript★ 8,855↓ 722M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Python★ 8,853Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
santinic/audiblez
Generate audiobooks from e-books
Python★ 8,635↓ 1,012/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Hopding/pdf-lib
Create and modify PDF documents in any JavaScript environment
TypeScript★ 8,634↓ 45.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
48Weakhealth index
emilkowalski/vaul
A drawer component for React.
TypeScript★ 8,615↓ 136M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · Maven
30At Riskhealth index
DylanVann/react-native-fast-image
🚩 FastImage, performant React Native image component.
TypeScript · Java · Objective-C★ 8,420↓ 558.5K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
XPixelGroup/BasicSR
Open Source Image and Video Restoration Toolbox for Super-resolution, Denoise, Deblurring, etc. Currently, it includes EDSR, RCAN, SRResNet, SRGAN, ESRGAN, EDVR, BasicVSR, SwinIR, ECBSR, etc. Also support StyleGAN2, DFDNet.
Python★ 8,381Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
remix-run/history
Manage session history with JavaScript
JavaScript · TypeScript★ 8,299↓ 44.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
zilliztech/GPTCache
Semantic cache for LLMs. Fully integrated with LangChain and llama_index.
Python★ 8,192Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
soldair/node-qrcode
qr code generator
JavaScript★ 8,174↓ 85.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
MagicStack/asyncpg
A fast PostgreSQL Database Client Library for Python/asyncio.
Python · Cython★ 8,088Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
docopt/docopt
Create *beautiful* command-line interfaces with Python
Python★ 8,005Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
enquirer/enquirer
Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert
JavaScript · SCSS★ 7,947↓ 130M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
juliencrn/usehooks-ts
React hook library, ready to use, written in Typescript.
TypeScript★ 7,857↓ 19.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
styled-components/polished
A lightweight toolset for writing styles in JavaScript ✨
JavaScript★ 7,662↓ 40.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
aws/aws-sdk-js
AWS SDK for JavaScript v2 (End-of-Life as of 09/08/2025). The AWS SDK for JavaScript v3 in the browser and Node.js is available here: https://github.com/aws/aws-sdk-js-v3
JavaScript · Ruby★ 7,603↓ 34.9M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
twitchtv/twirp
A simple RPC framework with protobuf service definitions
Go★ 7,530Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
57Moderatehealth index
jerryscript-project/jerryscript
Ultra-lightweight JavaScript engine for the Internet of Things.
C · JavaScript★ 7,419Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
The-Vibe-Company/megaparse
File Parser optimised for LLM Ingestion with no loss 🧠 Parse PDFs, Docx, PPTx in a format that is ideal for LLMs.
Python★ 7,412Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
28At Riskhealth index
jakearchibald/idb
IndexedDB, but with promises
TypeScript★ 7,411↓ 92.7M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
59Moderatehealth index
reactjs/react-modal
Accessible modal dialog component for React
JavaScript★ 7,406↓ 11M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
typestack/class-transformer
Decorator-based transformation, serialization, and deserialization between objects and classes.
TypeScript★ 7,341↓ 47.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0