Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,297
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,790 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At Riskhealth index
sculpin/sculpin
Sculpin — Static Site Generator
PHP★ 1,484↓ 2,020/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mosquito/aio-pika
AMQP 0.9 client designed for asyncio and humans.
Python★ 1,477↓ 6.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
psd-tools/psd-tools
Python package for reading Adobe Photoshop PSD files
Python★ 1,461Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-modern-rest
Modern REST framework for Django with types and async support!
Python★ 1,456↓ 13.3K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
composer/installers
A Multi-Framework Composer Library Installer
PHP★ 1,441↓ 2.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
bootique/bootique
Bootique is a minimally opinionated platform for modern runnable Java apps.
Java★ 1,427Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
34At Riskhealth index
PeculiarVentures/PKI.js
PKI.js is a pure JavaScript library implementing the formats that are used in PKI applications (signing, encryption, certificate requests, OCSP and TSP requests/responses). It is built on WebCrypto (Web Cryptography API) and requires no plug-ins.
TypeScript★ 1,396↓ 34.4M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JetBrains/phpstorm-stubs
PHP runtime & extensions header files for PhpStorm
PHP★ 1,394↓ 2.2M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
—
34At Riskhealth index
bitfoundation/bitplatform
Build all of your apps using what you already know and love ❤️
C# · HTML★ 1,372Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reatom/reatom
Reatom - the ultimate state manager
TypeScript★ 1,371↓ 37K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/parsel
Parsel lets you extract data from XML/HTML documents using XPath or CSS selectors
Python★ 1,354↓ 4.7M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
subsquid/squid-sdk
TypeScript ETL toolkit for indexing Ethereum, Solana, and Substrate data, sourced from SQD Network.
TypeScript★ 1,339↓ 75.4K/moSep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
12Criticalhealth index
caiiiycuk/js-dos
The best API for running dos programs in browser
TypeScript · JavaScript★ 1,336↓ 4,408/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
deckhouse/deckhouse
Kubernetes platform from Flant
Go★ 1,326Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
15Criticalhealth index
ghost1372/HandyControls
Contains some simple and commonly used WPF controls based on HandyControl
C#★ 1,316Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
34At Riskhealth index
oleg-shilo/wixsharp
Framework for building a complete MSI or WiX source code by using script files written with C# syntax.
C#★ 1,311Oct 11, 2026
MITOct 11, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
moonshine-software/moonshine
Laravel Admin panel and more. Simple for beginners and powerful for experts. Using Blade, Alpine.js and Tailwind CSS.
PHP · Blade★ 1,301↓ 13.1K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pahaz/sshtunnel
SSH tunnels to remote server.
Python★ 1,295↓ 29M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
Anorov/PySocks
A SOCKS proxy client and wrapper for Python.
Python★ 1,281↓ 51.2M/moSep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
MarshalX/yandex-music-api
Неофициальная Python библиотека для работы с API сервиса Яндекс.Музыка
Python★ 1,276↓ 15K/moOct 10, 2026
LGPL-3.0Oct 10, 2026 · metrics 2.10.0
RubyGems
15Criticalhealth index
DmitryTsepelev/store_model
Work with JSON-backed attributes as ActiveRecord-ish models
Ruby★ 1,232Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
PyPI · Maven
34At Riskhealth index
Kotlin/kotlin-jupyter
Kotlin kernel for Jupyter/IPython
Kotlin★ 1,232↓ 1,502/moOct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
cataclysmbn/Cataclysm-BN
Cataclysm: Bright Nights: A fork/variant of Cataclysm:DDA by CleverRaven with a mod registry at https://mods.cataclysmbn.org/
C++★ 1,220Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Koenkk/zigbee-herdsman-converters
Collection of device converters to be used with zigbee-herdsman
TypeScript★ 1,218↓ 94.5K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
Python★ 1,212↓ 649.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,211↓ 169M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
RubyGems · npm
28At Riskhealth index
ai/autoprefixer-rails
Autoprefixer for Ruby and Ruby on Rails
Ruby★ 1,210Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,198↓ 154M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,198Sep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
reo7sp/tgbot-cpp
C++ library for Telegram bot API
C++★ 1,194Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0