Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,547
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,304 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
PaulLeCam/react-leaflet
React components for Leaflet maps
TypeScript★ 5,596↓ 28.5M/moAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
31At Riskhealth index
lukeed/polka
A micro web server so fast, it'll make you dance! :dancers:
JavaScript★ 5,587↓ 130M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
28At Riskhealth index
kelseyhightower/envconfig
Golang library for managing configuration data from environment variables
Go★ 5,464Aug 21, 2026
MITAug 21, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
rails-api/active_model_serializers
ActiveModel::Serializer implementation and Rails hooks
Ruby★ 5,341Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
euske/pdfminer
Python PDF Parser (Not actively maintained). Check out pdfminer.six.
Python★ 5,274Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
rails/webpacker
Use Webpack to manage app-like JavaScript modules in Rails
Ruby · JavaScript★ 5,272↓ 744K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
nikic/FastRoute
Fast request router for PHP
PHP★ 5,267↓ 2M/moAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
Go
32At Riskhealth index
segmentio/ksuid
K-Sortable Globally Unique IDs
Go★ 5,266Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm
34At Riskhealth index
testing-library/react-hooks-testing-library
🐏 Simple and complete React hooks testing utilities that encourage good testing practices.
TypeScript★ 5,262↓ 11.6M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
27At Riskhealth index
bgrins/TinyColor
Fast, small color manipulation and conversion for JavaScript
JavaScript★ 5,247↓ 54.4M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
pypa/sampleproject
A sample project that exists for PyPUG's "Tutorial on Packaging and Distributing Projects"
Python★ 5,245↓ 488K/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
16Criticalhealth index
standard-things/esm
Tomorrow's ECMAScript modules today!
JavaScript★ 5,242Aug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rest-client/rest-client
Simple HTTP and REST client for Ruby, inspired by microframework syntax for specifying actions.
Ruby★ 5,212Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet
32At Riskhealth index
JoshClose/CsvHelper
Library to help reading and writing CSV files
C# · CSS★ 5,209Aug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
28At Riskhealth index
Marak/colors.js
get colors in your node.js console
JavaScript★ 5,167↓ 108M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
rails-api/rails-api
Rails for API only applications
Ruby★ 5,129Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
vmg/redcarpet
The safe Markdown parser, reloaded.
C · HTML · Ruby★ 5,079Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
Lyken17/pytorch-OpCounter
Count the MACs / FLOPs of your PyTorch model.
Python★ 5,078↓ 887K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
19Criticalhealth index
hashicorp/terraform-cdk
Define infrastructure resources using programming constructs and provision them using HashiCorp Terraform
TypeScript★ 5,075↓ 2.1M/moAug 12, 2026
MPL-2.0Aug 12, 2026 · metrics 2.10.0
npm · Maven
29At Riskhealth index
itinance/react-native-fs
Native filesystem access for react-native
C++ · C# · Objective-C★ 5,043↓ 2.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
Netflix/fast_jsonapi
No Longer Maintained - A lightning fast JSON:API serializer for Ruby Objects.
Ruby★ 5,032Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · RubyGems
64Moderatehealth index
google/pytype
A static type analyzer for Python code
Python★ 5,029↓ 924.9K/moAug 8, 2026
Custom licenseAug 8, 2026 · metrics 2.10.0
Packagist
45Weakhealth index
PHP-FFMpeg/PHP-FFMpeg
An object oriented PHP driver for FFMpeg binary
PHP★ 5,017↓ 815.5K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Instagram/MonkeyType
A Python library that generates static type annotations by collecting runtime types
Python★ 5,000Aug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
googlemaps/google-maps-services-python
Python client library for Google Maps API Web Services
Python★ 4,968↓ 3.1M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
Kinnara/ModernWpf
Modern styles and controls for your WPF applications
C#★ 4,959Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
NuGet
26At Riskhealth index
MediaBrowser/Emby
Emby Server is a personal media server with apps on just about every device.
C#★ 4,950Aug 11, 2026
GPL-2.0Aug 11, 2026 · metrics 2.10.0