Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,112
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
645 recordsRanked by popularity · browse by tag · record statistics
Packagist
8Criticalhealth index
shuchkin/simplexlsx
Parse and retrieve data from Excel XLSx files
PHP★ 1,829↓ 164.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io · Go · PyPI
34At Riskhealth index
dfinity/ic
Internet Computer blockchain source: the client/replica software run by nodes
Rust★ 1,792↓ 53K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
12Criticalhealth index
que-etc/resize-observer-polyfill
A polyfill for the Resize Observer API
JavaScript★ 1,752↓ 55.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
alexeyraspopov/picocolors
The tiniest and the fastest library for terminal output formatting with ANSI colors
JavaScript★ 1,751↓ 859M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nginx/njs
A subset of JavaScript language to use in nginx
C · Perl★ 1,599Sep 15, 2026
BSD-2-ClauseSep 15, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
tafia/quick-xml
Rust high performance xml reader and writer
Rust★ 1,567↓ 36.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
scalameta/scalafmt
Code formatter for Scala
Scala★ 1,489Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
sculpin/sculpin
Sculpin — Static Site Generator
PHP★ 1,484↓ 2,020/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mosquito/aio-pika
AMQP 0.9 client designed for asyncio and humans.
Python★ 1,477↓ 6.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
psd-tools/psd-tools
Python package for reading Adobe Photoshop PSD files
Python★ 1,461Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
akhodakivskiy/VimFx
Vim keyboard shortcuts for Firefox
CoffeeScript★ 1,431Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/parsel
Parsel lets you extract data from XML/HTML documents using XPath or CSS selectors
Python★ 1,354↓ 4.7M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
12Criticalhealth index
caiiiycuk/js-dos
The best API for running dos programs in browser
TypeScript · JavaScript★ 1,336↓ 4,408/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
styleguidist/react-docgen-typescript
A simple parser for react properties defined in typescript instead of propTypes.
TypeScript★ 1,266↓ 69M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
selfxyz/self
Prove your self
Circom · C · TypeScript★ 1,257↓ 13.5K/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
RubyGems
15Criticalhealth index
DmitryTsepelev/store_model
Work with JSON-backed attributes as ActiveRecord-ish models
Ruby★ 1,232Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
Python★ 1,212↓ 649.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,211↓ 169M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,198↓ 154M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,198Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
Python★ 1,175Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
VKCOM/VKUI
VKUI – это набор React-компонентов, с помощью которых можно создавать интерфейсы, внешне неотличимые от наших iOS и Android приложений.
TypeScript · MDX★ 1,161↓ 51.7K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
solod-dev/solod
A subset of Go that translates to C
Go★ 1,161Sep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
PyPI · npm
33At Riskhealth index
ivelum/djangoql
Advanced search language for Django
Python · HTML★ 1,139Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pytries/marisa-trie
Static memory-efficient Trie-like structures for Python based on marisa-trie C++ library.
Cython · Python★ 1,124↓ 2.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
patrickhulce/third-party-web
Data on third party entities and their impact on the web.
JavaScript★ 1,110↓ 20.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
shashwatak/satellite-js
Modular set of functions for SGP4 and SDP4 propagation of TLE and OMM.
TypeScript · C++★ 1,089↓ 453.1K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
16Criticalhealth index
PAIR-code/what-if-tool
Source code/webpage/demos for the What-If Tool
HTML★ 1,013Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
axelor/axelor-open-suite
The Axelor Open Suite based on Axelor Open Platform
Java★ 973Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0