Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,508
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,303 recordsRanked by popularity · browse by tag · record statistics
NuGet
43Weakhealth index
bchavez/Bogus
:card_index: A simple fake data generator for C#, F#, and VB.NET. Based on and ported from the famed faker.js.
C#★ 9,731Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Maven
18Criticalhealth index
lihengming/spring-boot-api-project-seed
:seedling::rocket:一个基于Spring Boot & MyBatis的种子项目,用于快速构建中小型API、RESTful API项目~
Java · FreeMarker★ 9,692Aug 28, 2026
No licenseAug 28, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
perwendel/spark
A simple expressive web framework for java. Spark has a kotlin DSL https://github.com/perwendel/spark-kotlin
Java★ 9,644Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
pmndrs/use-gesture
👇Bread n butter utility for component-tied mouse/touch gestures in React and Vanilla Javascript.
TypeScript★ 9,620↓ 49.5M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
swiftmailer/swiftmailer
Comprehensive mailing tools for PHP
PHP★ 9,435↓ 2M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
golang/mock
GoMock is a mocking framework for the Go programming language.
Go★ 9,341Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
terkelg/prompts
❯ Lightweight, beautiful and user-friendly interactive prompts
JavaScript★ 9,309↓ 214M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
62Moderatehealth index
chakra-core/ChakraCore
ChakraCore is an open source Javascript engine with a C API.
JavaScript · C++★ 9,258Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
seatgeek/fuzzywuzzy
Fuzzy String Matching in Python
Python★ 9,251Aug 28, 2026
GPL-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
imathis/octopress
Octopress is an obsessively designed framework for Jekyll blogging. It’s easy to configure and easy to deploy. Sweet huh?
Ruby · CSS · JavaScript★ 9,235Aug 28, 2026
No licenseAug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
node-schedule/node-schedule
A cron-like and not-cron-like job scheduler for Node.
JavaScript★ 9,205↓ 19.1M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
30At Riskhealth index
olivernn/lunr.js
A bit like Solr, but much smaller and not as bright
JavaScript★ 9,200↓ 27.9M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
FriendsOfPHP/Goutte
Goutte, a simple PHP Web Scraper
PHP★ 9,192↓ 232.7K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mrdoob/stats.js
JavaScript Performance Monitor
JavaScript★ 9,143↓ 15.7M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm · RubyGems
19Criticalhealth index
thoughtbot/bourbon
A Lightweight Sass Tool Set
Ruby★ 9,004↓ 741.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
59Moderatehealth index
mozilla/nunjucks
A powerful templating engine with inheritance, asynchronous control, and more (jinja2 inspired)
JavaScript★ 8,983↓ 15M/moAug 12, 2026
BSD-2-ClauseAug 12, 2026 · metrics 2.10.0
PyPI
54Moderatehealth index
pygame/pygame
🐍🎮 pygame (the library) is a Free and Open Source python programming language library for making multimedia applications like games built on top of the excellent SDL library. C, Python, Native, OpenGL.
C · Python★ 8,907Aug 28, 2026
No licenseAug 28, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
intel/ipex-llm
Accelerate local LLM inference and finetuning (LLaMA, Mistral, ChatGLM, Qwen, DeepSeek, Mixtral, Gemma, Phi, MiniCPM, Qwen-VL, MiniCPM-V, etc.) on Intel XPU (e.g., local PC with iGPU and NPU, discrete GPU such as Arc, Flex and Max); seamlessly integrate with llama.cpp, Ollama, HuggingFace, LangChain, LlamaIndex, vLLM, DeepSpeed, Axolotl, etc.
Python★ 8,864Aug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
JavaScript★ 8,855↓ 716M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
22At Riskhealth index
patrickmn/go-cache
An in-memory key:value store/cache (similar to Memcached) library for Go, suitable for single-machine applications.
Go★ 8,844Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
19Criticalhealth index
aws/aws-sdk-go
This SDK has reached end-of-support. The AWS SDK for Go v2 is available here: https://github.com/aws/aws-sdk-go-v2
Go★ 8,675Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
46Weakhealth index
kaminari/kaminari
⚡ A Scope & Engine based, clean, powerful, customizable and sophisticated paginator for Ruby webapps
Ruby★ 8,672Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI · npm
22At Riskhealth index
hexgrad/kokoro
https://hf.co/hexgrad/Kokoro-82M
JavaScript · Python★ 8,585↓ 1.4M/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Hopding/pdf-lib
Create and modify PDF documents in any JavaScript environment
TypeScript★ 8,580↓ 41.7M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
48Weakhealth index
emilkowalski/vaul
A drawer component for React.
TypeScript★ 8,553↓ 155M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
paritytech/substrate
Substrate: The platform for blockchain innovators
Rust★ 8,397↓ 1,728/moSep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
53Moderatehealth index
traefik/yaegi
Yaegi is Another Elegant Go Interpreter
Go★ 8,378Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
XPixelGroup/BasicSR
Open Source Image and Video Restoration Toolbox for Super-resolution, Denoise, Deblurring, etc. Currently, it includes EDSR, RCAN, SRResNet, SRGAN, ESRGAN, EDVR, BasicVSR, SwinIR, ECBSR, etc. Also support StyleGAN2, DFDNet.
Python★ 8,365Aug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
remix-run/history
Manage session history with JavaScript
JavaScript · TypeScript★ 8,303↓ 46M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
graphql-python/graphene
GraphQL framework for Python
Python★ 8,238↓ 41.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0