Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,268
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,790 recordsRanked by popularity · browse by tag · record statistics
PyPI · npm
34At Riskhealth index
cvat-ai/cvat
Computer Vision Annotation Tool (CVAT) is a leading platform for building high-quality visual datasets for vision AI. It offers open-source, cloud, and enterprise products, as well as labeling services, for image, video, and 3D annotation with AI-assisted labeling, quality assurance, team collaboration, analytics, and developer APIs.
Python · TypeScript · JavaScript★ 16.7K↓ 86K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
clap-rs/clap
A full featured, fast Command Line Argument Parser for Rust
Rust★ 16.7K↓ 280M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aio-libs/aiohttp
Asynchronous HTTP client/server framework for asyncio and Python
Python★ 16.5K↓ 493M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
piskvorky/gensim
Topic Modelling for Humans
Python★ 16.5KSep 16, 2026
LGPL-2.1Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
treeverse/dvc
🦉 Data Versioning and ML Experiments
Python★ 15.9K↓ 2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Chocobozzz/PeerTube
ActivityPub-federated video streaming platform using P2P directly in your web browser
TypeScript★ 15.3KSep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm · Go +2
26At Riskhealth index
alphacep/vosk-api
Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node
Jupyter Notebook★ 15.1K↓ 758.4K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
sympy/sympy
A computer algebra system written in pure Python
Python★ 14.9KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
sindresorhus/got
🌐 Human-friendly and powerful HTTP request library for Node.js
TypeScript★ 14.9K↓ 145M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nltk/nltk
NLTK Source
Python★ 14.7KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
yiisoft/yii2
Yii 2: The Fast, Secure and Professional PHP Framework
PHP★ 14.3K↓ 505.3K/moAug 27, 2026
BSD-3-ClauseAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
rabbitmq/rabbitmq-server
Open source RabbitMQ: core server and tier 1 (built-in) plugins
JavaScript · Shell★ 13.8KAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/browserslist
🦔 Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-preset-env
JavaScript★ 13.6K↓ 726M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven · PyPI
34At Riskhealth index
CleverRaven/Cataclysm-DDA
Cataclysm - Dark Days Ahead. A turn-based survival game set in a post-apocalyptic world.
C++★ 13.2KSep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
The-PR-Agent/pr-agent
🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
Python★ 13.1K↓ 26.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go · PyPI
34At Riskhealth index
redpanda-data/redpanda
Redpanda is a streaming data platform for developers. Kafka API compatible. 10x faster. No ZooKeeper. No JVM!
C++ · Python★ 12.5KAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
infracost/infracost
Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!
Go★ 12.5KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven · npm
34At Riskhealth index
provectus/kafka-ui
Open-Source Web UI for Apache Kafka Management
Java · TypeScript★ 12.3KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
FerretDB/FerretDB
A truly Open Source MongoDB alternative
Go★ 11.1KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
siderolabs/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
Go★ 11KAug 28, 2026
MPL-2.0Aug 28, 2026 · metrics 2.10.0
NuGet
32At Riskhealth index
StockSharp/StockSharp
Algorithmic trading and quantitative trading open source platform to develop trading robots (stock markets, forex, crypto, bitcoins, and options).
C#★ 10.9KOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.9KSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.8K↓ 318M/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
unovue/shadcn-vue
Vue port of shadcn-ui
TypeScript · Vue★ 10.5K↓ 847.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Python★ 10.4K↓ 1.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
—
34At Riskhealth index
wwmm/easyeffects
Limiter, compressor, convolver, equalizer and auto volume and many other plugins for PipeWire applications
HTML · C++ · QML★ 10.2KSep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pymc-devs/pymc
Bayesian Modeling and Probabilistic Programming in Python
Python★ 9,727↓ 1.9M/moAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
JetBrains/Exposed
Kotlin SQL Framework
Kotlin★ 9,297Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
checkstyle/checkstyle
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
Java★ 9,004Aug 28, 2026
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
Python · JavaScript★ 9,000↓ 9,146/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0