Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,124
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
642 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
cube-js/cube
📊 Cube Core is open-source semantic layer for AI, BI and embedded analytics
Rust · TypeScript · MDX★ 20.9K↓ 1.3M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
lightgbm-org/LightGBM
A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
C++ · Python · R★ 18.8K↓ 19.9M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
framework7io/framework7
Full featured HTML framework for building iOS & Android apps
JavaScript · Vue · Svelte★ 18.8KSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
lottie-react-native/lottie-react-native
Lottie wrapper for React Native.
TypeScript · Kotlin · Swift★ 17.2K↓ 5.1M/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
less/less.js
Less. The dynamic stylesheet language.
JavaScript · Less★ 17K↓ 40.8M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
cvat-ai/cvat
Computer Vision Annotation Tool (CVAT) is a leading platform for building high-quality visual datasets for vision AI. It offers open-source, cloud, and enterprise products, as well as labeling services, for image, video, and 3D annotation with AI-assisted labeling, quality assurance, team collaboration, analytics, and developer APIs.
Python · TypeScript · JavaScript★ 16.7K↓ 86K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
19Criticalhealth index
janl/mustache.js
Minimal templating with {{mustaches}} in JavaScript
JavaScript★ 16.7K↓ 66.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
clap-rs/clap
A full featured, fast Command Line Argument Parser for Rust
Rust★ 16.7K↓ 280M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aio-libs/aiohttp
Asynchronous HTTP client/server framework for asyncio and Python
Python★ 16.5K↓ 493M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
piskvorky/gensim
Topic Modelling for Humans
Python★ 16.5KSep 16, 2026
LGPL-2.1Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
treeverse/dvc
🦉 Data Versioning and ML Experiments
Python★ 15.9K↓ 2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Chocobozzz/PeerTube
ActivityPub-federated video streaming platform using P2P directly in your web browser
TypeScript★ 15.3KSep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI · npm · Go +2
26At Riskhealth index
alphacep/vosk-api
Offline speech recognition API for Android, iOS, Raspberry Pi and servers with Python, Java, C# and Node
Jupyter Notebook★ 15.1K↓ 758.4K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
sympy/sympy
A computer algebra system written in pure Python
Python★ 14.9KSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
sindresorhus/got
🌐 Human-friendly and powerful HTTP request library for Node.js
TypeScript★ 14.9K↓ 145M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
nltk/nltk
NLTK Source
Python★ 14.7KSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
browserslist/browserslist
🦔 Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-preset-env
JavaScript★ 13.6K↓ 726M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Maven · PyPI
34At Riskhealth index
CleverRaven/Cataclysm-DDA
Cataclysm - Dark Days Ahead. A turn-based survival game set in a post-apocalyptic world.
C++★ 13.2KSep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
The-PR-Agent/pr-agent
🚀 PR Agent: The Original Open-Source PR Reviewer. This project is not the Qodo free tier.
Python★ 13.1K↓ 26.6K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
seanmonstar/reqwest
An easy and powerful Rust HTTP Client
Rust★ 11.8K↓ 60.6M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.9KSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.8K↓ 318M/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modin-project/modin
Modin: Scale your Pandas workflows by changing a single line of code
Python★ 10.4K↓ 1.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
34At Riskhealth index
wwmm/easyeffects
Limiter, compressor, convolver, equalizer and auto volume and many other plugins for PipeWire applications
HTML · C++ · QML★ 10.2KSep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
anyproto/anytype-ts
Official Anytype client for MacOS, Linux, and Windows
TypeScript★ 8,836Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
eternnoir/pyTelegramBotAPI
Python Telegram bot api.
Python★ 8,779↓ 947.5K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
open-pencil/open-pencil
AI-native design editor. Open-source Figma alternative.
TypeScript★ 8,326↓ 73.6K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
15Criticalhealth index
stefanpenner/es6-promise
A polyfill for ES6-style Promises
JavaScript★ 7,249↓ 71.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
netalertx/NetAlertX
Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.
Python · JavaScript★ 7,136Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
subzeroid/instagrapi
🔥 The fastest and powerful Python library for Instagram Private API 2026 with HikerAPI SaaS
Python★ 6,812↓ 605.3K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0