Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,500
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,395 recordsRanked by popularity · browse by tag · record statistics
Go
27At Riskhealth index
orcaman/concurrent-map
a thread-safe concurrent map for go
Go★ 4,527Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
spulec/freezegun
Let your Python tests travel through time
Python★ 4,525↓ 50.1M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
uber-go/dig
A reflection based dependency injection toolkit for Go.
Go★ 4,505Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
30At Riskhealth index
jonschlinkert/gray-matter
Smarter YAML front matter parser, used by metalsmith, Gatsby, Netlify, Assemble, mapbox-gl, phenomic, vuejs vitepress, TinaCMS, Shopify Polaris, Ant Design, Astro, hashicorp, garden, slidev, saber, sourcegraph, and many others. Simple to use, and battle tested. Parses YAML by default but can also parse JSON Front Matter, Coffee Front Matter, TOML Front Matter, and has support for custom parsers. Please follow gray-matter's author: https://github.com/jonschlinkert
JavaScript★ 4,488↓ 33.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
ctran/annotate_models
Annotate Rails classes with schema and routes info
Ruby★ 4,483Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Go · npm
32At Riskhealth index
improbable-eng/grpc-web
gRPC Web implementation for Golang and TypeScript
TypeScript · Go · JavaScript★ 4,473Sep 23, 2026
Apache-2.0Sep 23, 2026 · metrics 2.10.0
Go
16Criticalhealth index
jung-kurt/gofpdf
A PDF document generator with high level support for text, drawing and images
Go★ 4,467Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
facebook/prop-types
Runtime type checking for React props and similar objects
JavaScript★ 4,447↓ 405M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
pieroxy/lz-string
LZ-based compression algorithm for JavaScript
TypeScript · Shell★ 4,433↓ 236M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
matplotlib/mplfinance
Financial Markets Data Visualization using Matplotlib
Python★ 4,432Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
—
34At Riskhealth index
canonical/dqlite
Embeddable, replicated and fault-tolerant SQL engine.
C★ 4,405Oct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
DistrictDataLabs/yellowbrick
Visual analysis and diagnostic tools to facilitate machine learning model selection.
Python★ 4,404Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
swimlane/ngx-charts
:bar_chart: Declarative Charting Framework for Angular
TypeScript★ 4,362↓ 1,300/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
26At Riskhealth index
bramstein/fontfaceobserver
Webfont loading. Simple, small, and efficient.
JavaScript★ 4,335↓ 29.5M/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
JavaScript★ 4,321↓ 112M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
43Weakhealth index
speedyapply/JobSpy
Jobs scraper library for LinkedIn, Indeed, Glassdoor, Google, ZipRecruiter & more
Python★ 4,298Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
richzhang/PerceptualSimilarity
LPIPS metric. pip install lpips
Python★ 4,276↓ 767.4K/moSep 17, 2026
BSD-2-ClauseSep 17, 2026 · metrics 2.10.0
Go
28At Riskhealth index
whalebrew/whalebrew
Homebrew, but with Docker images
Go★ 4,247Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
NuGet
18Criticalhealth index
nefarius/ViGEmBus
Windows kernel-mode driver emulating well-known USB game controllers.
C++★ 4,238Aug 28, 2026
BSD-3-ClauseAug 28, 2026 · metrics 2.10.0
Go
50Moderatehealth index
swaggo/gin-swagger
gin middleware to automatically generate RESTful API documentation with Swagger 2.0.
Go★ 4,237Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Go · npm · PyPI
19Criticalhealth index
kubeflow/pipelines
Machine Learning Pipelines for Kubeflow
Go · TypeScript · Python★ 4,214Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
68Goodhealth index
facebookresearch/nevergrad
A Python toolbox for performing gradient-free optimization
Python★ 4,206↓ 393.1K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
clean-css/clean-css
Fast and efficient CSS optimizer for node.js and the Web
JavaScript★ 4,199↓ 83.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
powermock/powermock
PowerMock is a Java framework that allows you to unit test code normally regarded as untestable.
Java★ 4,168Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
18Criticalhealth index
google/btree
BTree provides a simple, ordered, in-memory data structure for Go programs.
Go★ 4,163Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · Go · Maven
19Criticalhealth index
bufbuild/protoc-gen-validate
Protocol Buffer Validation - replaced by https://github.com/bufbuild/protovalidate
Go · Java · Starlark★ 4,119↓ 304.2K/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
xacrimon/dashmap
Blazing fast concurrent HashMap for Rust.
Rust★ 4,114↓ 27.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
AlecAivazis/survey
A golang library for building interactive and accessible prompts with full support for windows and posix terminals.
Go★ 4,100Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
19Criticalhealth index
draft-js-plugins/draft-js-plugins
React Plugin Architecture for Draft.js including Slack-Like Emojis, FB-Like Mentions and Stickers
TypeScript · JavaScript★ 4,090↓ 1.2M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0