Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,508
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,017 recordsRanked by popularity · browse by tag · record statistics
PyPI
68Goodhealth index
facebookresearch/nevergrad
A Python toolbox for performing gradient-free optimization
Python★ 4,206↓ 393.1K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
clean-css/clean-css
Fast and efficient CSS optimizer for node.js and the Web
JavaScript★ 4,199↓ 83.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
powermock/powermock
PowerMock is a Java framework that allows you to unit test code normally regarded as untestable.
Java★ 4,168Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
18Criticalhealth index
google/btree
BTree provides a simple, ordered, in-memory data structure for Go programs.
Go★ 4,163Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
PyPI · Go · Maven
19Criticalhealth index
bufbuild/protoc-gen-validate
Protocol Buffer Validation - replaced by https://github.com/bufbuild/protovalidate
Go · Java · Starlark★ 4,119↓ 304.2K/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
TypeScript★ 4,116↓ 2.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
xacrimon/dashmap
Blazing fast concurrent HashMap for Rust.
Rust★ 4,114↓ 27.4M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
AlecAivazis/survey
A golang library for building interactive and accessible prompts with full support for windows and posix terminals.
Go★ 4,100Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
apache/tika
The Apache Tika toolkit detects and extracts metadata and text from over a thousand different file types (such as PPT, XLS, and PDF).
Java · Rich Text Format★ 4,100Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
draft-js-plugins/draft-js-plugins
React Plugin Architecture for Draft.js including Slack-Like Emojis, FB-Like Mentions and Stickers
TypeScript · JavaScript★ 4,090↓ 1.2M/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
LaravelCollective/html
HTML and Form Builders for the Laravel Framework
PHP★ 4,086↓ 561.9K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
RubyGems
29At Riskhealth index
awesome-print/awesome_print
Pretty print your Ruby objects with style -- in full color and with proper indentation
Ruby★ 4,078Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ts-essentials/ts-essentials
All essential TypeScript types in one place 🤙
TypeScript★ 4,076↓ 23.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
async-rs/async-std
Async version of the Rust standard library
Rust★ 4,062↓ 3.9M/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
50Moderatehealth index
rspeer/python-ftfy
Fixes mojibake and other glitches in Unicode text, after the fact.
Python · Jupyter Notebook★ 4,060↓ 16.5M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
—
27At Riskhealth index
fireice-uk/xmr-stak
Free Monero RandomX Miner and unified CryptoNight miner
C++ · C★ 4,059Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
fake-useragent/fake-useragent
Up-to-date simple useragent faker with real world database
Python★ 4,049↓ 10.8M/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
taiga-family/taiga-ui
Angular components library for awesome people
TypeScript · HTML★ 4,047↓ 709.1K/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
RubyGems
26At Riskhealth index
xcpretty/xcpretty
Flexible and fast xcodebuild formatter
Ruby · Gherkin★ 4,036Aug 28, 2026
Custom licenseAug 28, 2026 · metrics 2.10.0
Go
29At Riskhealth index
roboll/helmfile
Deploy Kubernetes Helm Charts
Go★ 4,034Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
59Moderatehealth index
hello-pangea/dnd
💅 Beautiful and accessible drag and drop for lists with React. ⭐️ Star to support our work!
TypeScript★ 4,024↓ 11.2M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Go · npm
23At Riskhealth index
Harry-zklcdc/go-proxy-bingai
用 Vue3 和 Go 搭建的微软 New Bing 演示站点,拥有一致的 UI 体验,支持 ChatGPT 提示词,支持 API 调用,国内可用。
HTML · JavaScript★ 4,015Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
tulios/kafkajs
A modern Apache Kafka client for node.js
JavaScript★ 4,005↓ 13.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
28At Riskhealth index
stacktracejs/stacktrace.js
Generate, parse, and enhance JavaScript stack traces in all web browsers
JavaScript★ 4,002↓ 26.1M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
encode/databases
Async database support for Python. 🗄
Python★ 3,990↓ 950.5K/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
FakerPHP/Faker
Faker is a PHP library that generates fake data for you
PHP★ 3,989↓ 12.2M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
grantjenks/python-sortedcontainers
Python Sorted Container Types: Sorted List, Sorted Dict, and Sorted Set
Python★ 3,982Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
boppreh/keyboard
Hook and simulate global keyboard events on Windows and Linux.
Python★ 3,967Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
pyppeteer/pyppeteer
Headless chrome/chromium automation library (unofficial port of puppeteer)
Python★ 3,941↓ 821.5K/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
icsharpcode/SharpZipLib
#ziplib is a Zip, GZip, Tar and BZip2 library written entirely in C# for the .NET platform.
C#★ 3,932Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0