Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,752
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,467 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
reatom/reatom
Reatom - the ultimate state manager
TypeScript★ 1,357↓ 72.1K/moJul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
crates.io
50Moderatehealth index
pomsky-lang/pomsky
A new, portable, regular expression language
Rust★ 1,354↓ 1,712/moAug 9, 2026
Apache-2.0Aug 9, 2026 · metrics 2.10.0
PyPI
45Weakhealth index
bytedance/flux
A fast communication-overlapping library for tensor/expert parallelism on GPUs.
C++ · Cuda · Python★ 1,353Aug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
PyPI
71Goodhealth index
python-poetry/cleo
Cleo allows you to create beautiful and testable command-line interfaces.
Python★ 1,351↓ 76.6M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
20At Riskhealth index
gtanner/qrcode-terminal
QRCodes in your terminal, cause thats hot.
JavaScript★ 1,350↓ 29M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/parsel
Parsel lets you extract data from XML/HTML documents using XPath or CSS selectors
Python★ 1,350↓ 4.7M/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
yhat/pandasql
sqldf for pandas
Python★ 1,349Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
crates.io
46Weakhealth index
tkaitchuck/aHash
aHash is a non-cryptographic hashing algorithm that uses the AES hardware instruction
Rust★ 1,346↓ 44.9M/moAug 3, 2026
Apache-2.0Aug 3, 2026 · metrics 2.10.0
npm
34At Riskhealth index
omnidan/node-emoji
💖 simple emoji support for node.js projects
TypeScript · JavaScript★ 1,342↓ 71.1M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
nashwaan/xml-js
Converter utility between XML text and Javascript object / JSON text.
JavaScript★ 1,341↓ 44.2M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
rbgirshick/yacs
YACS -- Yet Another Configuration System
Python★ 1,337Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Go
16Criticalhealth index
grpc-ecosystem/go-grpc-prometheus
Prometheus monitoring for your gRPC Go servers.
Go★ 1,336Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
34At Riskhealth index
subsquid/squid-sdk
TypeScript ETL toolkit for indexing Ethereum, Solana, and Substrate data, sourced from SQD Network.
TypeScript★ 1,334Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.10.0
Go
19Criticalhealth index
valyala/bytebufferpool
Anti-memory-waste byte buffer pool
Go★ 1,330Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
16Criticalhealth index
opencover/opencover
A code coverage tool for .NET 2 and above (WINDOWS OS only), support for 32 and 64 processes with both branch and sequence points
C++ · C#★ 1,329Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 2.10.0
16Criticalhealth index
ceph/ceph-container
Docker files and images to run Ceph in containers
Mixed★ 1,324Jul 19, 2026
No licenseJul 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
php-http/discovery
Finds installed clients and message factories
PHP★ 1,324↓ 10M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
guard/guard-rspec
Guard::RSpec automatically run your specs (much like autotest)
Ruby★ 1,322Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-modern-rest
Modern REST framework for Django with types and async support!
Python★ 1,318↓ 8,600/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
Go
34At Riskhealth index
deckhouse/deckhouse
Kubernetes platform from Flant
Go★ 1,317Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
Packagist
53Moderatehealth index
php-http/message
HTTP Message related tools
PHP★ 1,317↓ 5.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
11Criticalhealth index
caiiiycuk/js-dos
The best API for running dos programs in browser
TypeScript · JavaScript★ 1,316↓ 6,124/moAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
googlearchive/PyDrive
Google Drive API Python wrapper library
Python★ 1,311Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
spinnaker/kayenta
Automated Canary Service
Java · Scala★ 1,308Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
npm
15Criticalhealth index
ghost1372/HandyControls
Contains some simple and commonly used WPF controls based on HandyControl
C#★ 1,307Sep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
samg/diffy
Easy Diffing in Ruby
Ruby★ 1,306Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
square/cane
Code quality threshold checking as part of your build
Ruby★ 1,305Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
npm
22At Riskhealth index
YuzuJS/setImmediate
A cross-browser implementation of the new setImmediate API.
JavaScript★ 1,302↓ 211M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
40Weakhealth index
isaacs/node-graceful-fs
fs with incremental backoff on EMFILE
JavaScript★ 1,302↓ 758M/moAug 4, 2026
BlueOak-1.0.0Aug 4, 2026 · metrics 2.10.0