Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,743
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,477 recordsRanked by popularity · browse by tag · record statistics
RubyGems
14Criticalhealth index
DmitryTsepelev/store_model
Work with JSON-backed attributes as ActiveRecord-ish models
Ruby★ 1,232Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
npm
22At Riskhealth index
JavaScript★ 1,231↓ 129M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
html5lib/html5lib-python
Standards-compliant library for parsing and serializing HTML documents and fragments in Python
Python · HTML★ 1,223↓ 38.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI · Go
28At Riskhealth index
allwefantasy/auto-coder
No repository description published.
Python★ 1,222↓ 5,171/moAug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.10.0
Go
46Weakhealth index
evanphx/json-patch
A Go library to apply RFC6902 patches and create and apply RFC7386 patches
Go★ 1,221Jul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
RubyGems
27At Riskhealth index
igrigorik/em-http-request
Asynchronous HTTP Client (EventMachine + Ruby)
Ruby★ 1,217Jul 21, 2026
No licenseJul 21, 2026 · metrics 2.10.0
Go
34At Riskhealth index
kudobuilder/kudo
Kubernetes Universal Declarative Operator (KUDO)
Go★ 1,215Aug 9, 2026
Apache-2.0Aug 9, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
arundo/adtk
A Python toolkit for rule-based/unsupervised anomaly detection in time series
Python★ 1,214Aug 13, 2026
MPL-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
un1t/django-cleanup
Automatically deletes old file for FileField and ImageField. It also deletes files on models instance deletion.
Python★ 1,213↓ 649.5K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
ai/autoprefixer-rails
Autoprefixer for Ruby and Ruby on Rails
Ruby★ 1,210Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Maven
50Moderatehealth index
jmrozanec/cron-utils
Cron utils for parsing, validations and human readable descriptions as well as date/time interoperability.
Java★ 1,208Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Koenkk/zigbee-herdsman-converters
Collection of device converters to be used with zigbee-herdsman
TypeScript★ 1,206↓ 175.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
23At Riskhealth index
tmux-plugins/tmux-copycat
A plugin that enhances tmux search
Shell★ 1,204Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
floating/frame
System-wide Web3 for macOS, Windows and Linux
JavaScript · TypeScript · Stylus★ 1,202Aug 28, 2026
GPL-3.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-nested
PostCSS plugin to unwrap nested rules like how Sass does it.
JavaScript★ 1,199↓ 172M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
wemake-services/django-split-settings
Organize Django settings into multiple files and directories. Easily override and modify settings. Use wildcards and optional settings files.
Python★ 1,199Aug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
Go
46Weakhealth index
uber-go/multierr
Combine one or more Go errors together
Go★ 1,198Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
helloflask/bootstrap-flask
Bootstrap 4 & 5 helper for your Flask projects.
SCSS · Python · HTML★ 1,195Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
npm
35Weakhealth index
TritonDataCenter/node-verror
Rich JavaScript errors
JavaScript · Makefile★ 1,191Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
64Moderatehealth index
ROCm/MIOpen
[DEPRECATED] Moved to ROCm/rocm-libraries repo
Assembly★ 1,190Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mpmath/mpmath
Python library for arbitrary-precision floating-point arithmetic
Python★ 1,188↓ 169M/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
SukkaW/nolyfill
Speed up your package installation process, reduce your disk usage, and extend the lifespan of your precious SSD.
TypeScript · JavaScript★ 1,185Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
41Weakhealth index
pmndrs/its-fine
🐶🔥 A collection of escape hatches for React.
TypeScript★ 1,184↓ 26.6M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
25At Riskhealth index
marnusw/date-fns-tz
Complementary library for date-fns v2 adding IANA time zone support
JavaScript · TypeScript★ 1,180↓ 42.5M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
29At Riskhealth index
developit/web-worker
Consistent Web Workers in browser and Node.
JavaScript★ 1,175↓ 27.4M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
pymorphy2/pymorphy2
Morphological analyzer / inflection engine for Russian and Ukrainian languages.
Python★ 1,175Aug 13, 2026
No licenseAug 13, 2026 · metrics 2.10.0
Maven
8Criticalhealth index
mgarin/weblaf
WebLaF is a fully open-source Look & Feel and component library written in pure Java for cross-platform desktop Swing applications.
Java★ 1,174Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
benjamn/ast-types
Esprima-compatible implementation of the Mozilla JS Parser API
TypeScript★ 1,172↓ 242M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
30At Riskhealth index
moxystudio/node-cross-spawn
A cross platform solution to node's spawn and spawnSync
JavaScript★ 1,171↓ 961M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
carmen-ruby/carmen
A repository of geographic regions for Ruby
Ruby★ 1,169Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0