Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,490
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,302 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
pallets/jinja
A very fast and expressive template engine.
Python★ 11.7KAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
42Weakhealth index
tachyons-css/tachyons
Functional css for humans
CSS★ 11.7K↓ 409.6K/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
code4craft/webmagic
A scalable web crawler framework for Java.
Java · HTML★ 11.7KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
egulias/EmailValidator
PHP Email address validator
PHP★ 11.6K↓ 16.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
ssssssss-team/spider-flow
新一代爬虫平台,以图形化方式定义爬虫流程,不写代码即可完成爬虫。
Java★ 11.4KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
JavaScript · Stylus · CSS★ 11.3K↓ 11.9M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
60Moderatehealth index
FormidableLabs/victory
A collection of composable React components for building interactive data visualizations
TypeScript · MDX · JavaScript★ 11.2K↓ 17M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 26.5M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
18Criticalhealth index
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
JavaScript★ 11.2KAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
55Moderatehealth index
gregberge/svgr
Transform SVGs into React components 🦁
TypeScript · MDX · JavaScript★ 11K↓ 305M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
kkroening/ffmpeg-python
Python bindings for FFmpeg - with complex filtering support
Python★ 11K↓ 9.6M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
jfeinstein10/SlidingMenu
An Android library that allows you to easily create applications with slide-in menus. You may use it in your Android apps provided that you cite this project and include the license in your app. Thanks!
Java★ 11KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
square/javapoet
A Java API for generating .java source files.
Java★ 10.8KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
51Moderatehealth index
TooTallNate/Java-WebSocket
A barebones WebSocket client and server implementation written in 100% Java.
Java · HTML★ 10.8KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
59Moderatehealth index
gka/chroma.js
JavaScript library for all kinds of color manipulations
JavaScript★ 10.6K↓ 12.4M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
Go
34At Riskhealth index
sourcegraph/conc
Better structured concurrency for go
Go★ 10.4KAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Stuk/jszip
Create, read and edit .zip files with Javascript
JavaScript★ 10.4K↓ 160M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
Go
29At Riskhealth index
noisetorch/NoiseTorch
Real-time microphone noise suppression on Linux.
Go · C★ 10.3KAug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reactjs/react-transition-group
An easy way to perform animations when a React component enters or leaves the DOM
JavaScript★ 10.2K↓ 227M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
npm
31At Riskhealth index
pahen/madge
Create graphs from your CommonJS, AMD or ES6 module dependencies
JavaScript★ 10.2K↓ 12.2M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
tweenjs/tween.js
JavaScript/TypeScript animation engine
TypeScript · JavaScript★ 10.1K↓ 35.5M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
stanfordnlp/CoreNLP
CoreNLP: A Java suite of core NLP tools for tokenization, sentence segmentation, NER, parsing, coreference, sentiment analysis, etc.
Java★ 10.1KAug 28, 2026
GPL-3.0Aug 28, 2026 · metrics 2.10.0
Go
19Criticalhealth index
golang/protobuf
Go support for Google's protocol buffers
Go★ 10.1KAug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Packagist
33At Riskhealth index
php-fig/container
No repository description published.
PHP★ 9,995↓ 21.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm · PyPI
19Criticalhealth index
microsoft/vscode-copilot-chat
Copilot Chat extension for VS Code
TypeScript★ 9,975↓ 7,611/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Maven
14Criticalhealth index
xuchengsheng/spring-reading
涵盖了 Spring 框架的核心概念和关键功能,包括控制反转(IOC)容器的使用,面向切面编程(AOP)的原理与实践,事务管理的方式与实现,Spring MVC 的流程与控制器工作机制,以及 Spring 中数据访问、安全、Boot 自动配置等方面的深入研究。此外,它还包含了 Spring 事件机制的应用、高级主题如缓存抽象和响应式编程,以及对 Spring 源码的编程风格与设计模式的深入探讨。
Java★ 9,928Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
senchalabs/connect
Connect is an extensible HTTP server framework for node using "plugins" known as middleware.
JavaScript★ 9,882↓ 71.9M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Maven · PyPI
25At Riskhealth index
LaurieWired/GhidraMCP
MCP Server for Ghidra
Java · Python★ 9,876Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
paascloud/paascloud-master
spring cloud + vue + oAuth2.0全家桶实战,前后端分离模拟商城,完整的购物流程、后端运营平台,可以实现快速搭建企业级微服务项目。支持微信登录等三方登录。
Java★ 9,862Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
28At Riskhealth index
lukeed/clsx
A tiny (239B) utility for constructing `className` strings conditionally.
JavaScript★ 9,823↓ 445M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0