Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,575
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,368 recordsRanked by popularity · browse by tag · record statistics
npm
19Criticalhealth index
atomiks/tippyjs
Tooltip, popover, dropdown, and menu library
JavaScript · TypeScript★ 12.3K↓ 25.4M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
PyPI · npm
32At Riskhealth index
marcotcr/lime
Lime: Explaining the predictions of any machine learning classifier
JavaScript · Python★ 12.2K↓ 452.5K/moAug 12, 2026
BSD-2-ClauseAug 12, 2026 · metrics 2.10.0
npm
29At Riskhealth index
listen1/listen1_chrome_extension
one for all free music in china (chrome extension, also works for firefox)
JavaScript · HTML · CSS★ 12.1KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
tadata-org/fastapi_mcp
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Python★ 12K↓ 17M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
karma-runner/karma
Spectacular Test Runner for JavaScript
JavaScript★ 12K↓ 13.6M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
32At Riskhealth index
developit/mitt
🥊 Tiny 200 byte functional event emitter / pubsub.
TypeScript★ 11.9K↓ 119M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
27At Riskhealth index
tj/co
The ultimate generator based flow-control goodness for nodejs (supports thunks, promises, etc)
JavaScript★ 11.8K↓ 173M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
seanmonstar/reqwest
An easy and powerful Rust HTTP Client
Rust★ 11.8K↓ 51.4M/moAug 3, 2026
Apache-2.0Aug 3, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pallets/jinja
A very fast and expressive template engine.
Python★ 11.7KAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
42Weakhealth index
tachyons-css/tachyons
Functional css for humans
CSS★ 11.7K↓ 409.6K/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Maven
29At Riskhealth index
code4craft/webmagic
A scalable web crawler framework for Java.
Java · HTML★ 11.7KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
egulias/EmailValidator
PHP Email address validator
PHP★ 11.6K↓ 16.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Maven
23At Riskhealth index
ssssssss-team/spider-flow
新一代爬虫平台,以图形化方式定义爬虫流程,不写代码即可完成爬虫。
Java★ 11.4KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
stylus/stylus
Expressive, robust, feature-rich CSS language built for nodejs
JavaScript · Stylus · CSS★ 11.3K↓ 11.9M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
60Moderatehealth index
FormidableLabs/victory
A collection of composable React components for building interactive data visualizations
TypeScript · MDX · JavaScript★ 11.2K↓ 17M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
npm
45Weakhealth index
ds300/patch-package
Fix broken node modules instantly 🏃🏽‍♀️💨
TypeScript · Shell★ 11.2K↓ 26.5M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
npm
18Criticalhealth index
scottjehl/Respond
A fast & lightweight polyfill for min/max-width CSS3 Media Queries (for IE 6-8, and more)
JavaScript★ 11.2KAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
34At Riskhealth index
FerretDB/FerretDB
A truly Open Source MongoDB alternative
Go★ 11.1KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
npm
55Moderatehealth index
gregberge/svgr
Transform SVGs into React components 🦁
TypeScript · MDX · JavaScript★ 11K↓ 305M/moAug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Go
34At Riskhealth index
siderolabs/talos
Talos Linux is a modern Linux distribution built for Kubernetes.
Go★ 11KAug 28, 2026
MPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
kkroening/ffmpeg-python
Python bindings for FFmpeg - with complex filtering support
Python★ 11K↓ 9.6M/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
jfeinstein10/SlidingMenu
An Android library that allows you to easily create applications with slide-in menus. You may use it in your Android apps provided that you cite this project and include the license in your app. Thanks!
Java★ 11KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
square/javapoet
A Java API for generating .java source files.
Java★ 10.8KAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Maven
51Moderatehealth index
TooTallNate/Java-WebSocket
A barebones WebSocket client and server implementation written in 100% Java.
Java · HTML★ 10.8KAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
serde-rs/serde
Serialization framework for Rust
Rust★ 10.8K↓ 272M/moAug 20, 2026
Apache-2.0Aug 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openvinotoolkit/openvino
OpenVINO™ is an open source toolkit for optimizing and deploying AI inference
C++★ 10.6KAug 12, 2026
Apache-2.0Aug 12, 2026 · metrics 2.10.0
NuGet
32At Riskhealth index
StockSharp/StockSharp
Algorithmic trading and quantitative trading open source platform to develop trading robots (stock markets, forex, crypto, bitcoins, and options).
C#★ 10.6KAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
59Moderatehealth index
gka/chroma.js
JavaScript library for all kinds of color manipulations
JavaScript★ 10.6K↓ 12.4M/moAug 12, 2026
Custom licenseAug 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
unovue/shadcn-vue
Vue port of shadcn-ui
TypeScript · Vue★ 10.5K↓ 847.2K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
34At Riskhealth index
sourcegraph/conc
Better structured concurrency for go
Go★ 10.4KAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0