Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,471
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,014 recordsRanked by popularity · browse by tag · record statistics
npm · RubyGems
34At Riskhealth index
redmine/redmine
Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp
Ruby · HTML★ 6,022Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
hartator/wayback-machine-downloader
Download an entire website from the Wayback Machine.
Ruby★ 5,929Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
48Weakhealth index
alangpierce/sucrase
Super-fast alternative to Babel for when you can target modern JS runtimes
TypeScript★ 5,870↓ 181M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aiogram/aiogram
aiogram is a modern and fully asynchronous framework for Telegram Bot API written in Python using asyncio
Python★ 5,850↓ 4.4M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
mikaelbr/node-notifier
A Node.js module for sending notifications on native Mac, Windows and Linux (or Growl as fallback)
JavaScript★ 5,841↓ 19.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
mysticatea/npm-run-all
A CLI tool to run multiple npm-scripts in parallel or sequential.
JavaScript★ 5,832↓ 18.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
Layout-Parser/layout-parser
A Unified Toolkit for Deep Learning Based Document Image Analysis
Python★ 5,779↓ 93.3K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
18Criticalhealth index
piotrwitek/utility-types
Collection of utility types, complementing TypeScript built-in mapped types and aliases (think "lodash" for static types).
TypeScript★ 5,762↓ 39.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
7Criticalhealth index
disintegration/imaging
Imaging is a simple image processing package for Go
Go★ 5,756Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
dependabot/dependabot-core
🤖 Dependabot's core logic for creating update PRs.
Ruby · C#★ 5,740Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
46Weakhealth index
python-openxml/python-docx
Create and modify Word documents with Python
Python★ 5,721↓ 109M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
vi3k6i5/flashtext
Extract Keywords from sentence or Replace keywords in sentences.
Python★ 5,707↓ 2.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
developit/unfetch
🐕 Bare minimum 500b fetch polyfill.
JavaScript · TypeScript★ 5,697↓ 35M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
NuGet · PyPI
34At Riskhealth index
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
C#★ 5,686Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
mislav/will_paginate
Pagination library for Rails and other Ruby applications
Ruby★ 5,684Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
28At Riskhealth index
gogo/protobuf
[Deprecated] Protocol Buffers for Go with Gadgets
Go★ 5,664Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm · Maven
29At Riskhealth index
crazycodeboy/react-native-splash-screen
A splash screen for react-native, hide when application loaded ,it works on iOS and Android.
Java · Objective-C★ 5,658↓ 341.9K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go · RubyGems
19Criticalhealth index
matrix-org/dendrite
Dendrite is a second-generation Matrix homeserver written in Go!
Go★ 5,625Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
18Criticalhealth index
assaf/zombie
Insanely fast, full-stack, headless browser testing using node.js
JavaScript★ 5,623↓ 39.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
airbnb/ts-migrate
A tool to help migrate JavaScript code quickly and conveniently to TypeScript
TypeScript★ 5,621↓ 1.6M/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
26At Riskhealth index
russross/blackfriday
Blackfriday: a markdown processor for Go
Go★ 5,606Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
PaulLeCam/react-leaflet
React components for Leaflet maps
TypeScript★ 5,605↓ 30.6M/moOct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI · RubyGems
34At Riskhealth index
google/clusterfuzz
Scalable fuzzing infrastructure.
Python★ 5,595↓ 6,886/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
31At Riskhealth index
lukeed/polka
A micro web server so fast, it'll make you dance! :dancers:
JavaScript★ 5,590↓ 134M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
29At Riskhealth index
kelseyhightower/envconfig
Golang library for managing configuration data from environment variables
Go★ 5,468Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
RubyGems
45Weakhealth index
rails-api/active_model_serializers
ActiveModel::Serializer implementation and Rails hooks
Ruby★ 5,341Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
ipython-contrib/jupyter_contrib_nbextensions
A collection of various notebook extensions for Jupyter
JavaScript · HTML★ 5,276↓ 367.7K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
euske/pdfminer
Python PDF Parser (Not actively maintained). Check out pdfminer.six.
Python★ 5,273↓ 245K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm · RubyGems
34At Riskhealth index
rails/webpacker
Use Webpack to manage app-like JavaScript modules in Rails
Ruby · JavaScript★ 5,272↓ 744K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
32At Riskhealth index
segmentio/ksuid
K-Sortable Globally Unique IDs
Go★ 5,271Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0