Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,148
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,953 recordsRanked by popularity · browse by tag · record statistics
npm
26At Riskhealth index
coopernurse/node-pool
Generic resource pooling for node.js
JavaScript★ 2,406↓ 43M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
blakeembrey/change-case
Convert strings between camelCase, PascalCase, Capital Case, snake_case and more
TypeScript★ 2,404↓ 229M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
webpack/webpack-hot-middleware
Webpack hot reloading you can attach to your own server
JavaScript★ 2,376Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
node-cache/node-cache
a node internal (in-memory) caching module
CoffeeScript★ 2,374↓ 18.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
JelteF/PyLaTeX
A Python library for creating LaTeX files
Python★ 2,354↓ 742.2K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
Comfy-Org/desktop
[ARCHIVED] Superseded by https://github.com/Comfy-Org/Comfy-Desktop
TypeScript★ 2,351Sep 20, 2026
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
ethereum/py-evm
A Python implementation of the Ethereum Virtual Machine
Python★ 2,349↓ 232.9K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
sebastianbergmann/phploc
A tool for quickly measuring the size of a PHP project.
PHP★ 2,343↓ 102.2K/moSep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
langchain-ai/langserve
LangServe 🦜️🏓
JavaScript · Python · TypeScript★ 2,329Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
fastapiutils/fastapi-utils
Reusable utilities for FastAPI
Python★ 2,310Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
seb-m/pyinotify
Monitoring filesystems events with inotify on Linux.
Python★ 2,304Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
Automattic/cli-table
Pretty unicode tables for the CLI with Node.JS
JavaScript★ 2,292↓ 17.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
globocom/m3u8
Python m3u8 Parser for HTTP Live Streaming (HLS) Transmissions
Python★ 2,278Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Suor/django-cacheops
A slick ORM cache with automatic granular event-driven invalidation.
Python★ 2,273↓ 1.9M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
helpers/handlebars-helpers
188 handlebars helpers in ~20 categories. Can be used with Assemble, Ghost, YUI, express.js etc.
JavaScript★ 2,269↓ 412.2K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
pyscaffold/pyscaffold
🛠 Python project template generator with batteries included
Python★ 2,260↓ 1M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
20At Riskhealth index
plurals/pluralize
Pluralize or singularize any word based on a count
JavaScript★ 2,215Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
sebastianbergmann/phpcpd
Copy/Paste Detector (CPD) for PHP code.
PHP★ 2,209↓ 426.9K/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
25At Riskhealth index
evanw/node-source-map-support
Adds source map support to node.js (for stack traces)
JavaScript★ 2,194↓ 489M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
17Criticalhealth index
dominictarr/event-stream
EventStream is like functional programming meets IO
JavaScript★ 2,174↓ 23.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
jazzband/django-widget-tweaks
Tweak the form field rendering in templates, not in python-level form definitions. CSS classes and HTML attributes can be altered.
Python★ 2,163↓ 1.3M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
23At Riskhealth index
sutoiku/formula.js
JavaScript implementation of most Microsoft Excel formula functions
JavaScript★ 2,155↓ 16.7K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
PyPI · crates.io
30At Riskhealth index
wasmerio/wasmer-python
🐍🕸 WebAssembly runtime for Python
Rust · Python★ 2,153↓ 733.5K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
taylorhakes/promise-polyfill
Lightweight ES6 Promise polyfill for the browser and node. A+ Compliant
JavaScript★ 2,142↓ 20.8M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
ogen-go/ogen
OpenAPI v3 code generator for go
Go · Go Template★ 2,141Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
alexei/sprintf.js
sprintf.js is a complete open source JavaScript sprintf implementation
JavaScript★ 2,138↓ 362M/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
12Criticalhealth index
davidbau/seedrandom
seeded random number generator for Javascript
JavaScript · HTML★ 2,131↓ 33.3M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
GongRzhe/Office-Word-MCP-Server
A Model Context Protocol (MCP) server for creating, reading, and manipulating Microsoft Word documents. This server enables AI assistants to work with Word documents through a standardized interface, providing rich document editing capabilities.
Python★ 2,106Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go · PyPI
53Moderatehealth index
traefik/mesh
Traefik Mesh - Simpler Service Mesh
Go★ 2,101Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
RobertCraigie/prisma-client-py
Prisma Client Python is an auto-generated and fully type-safe database client designed for ease of use
Python★ 2,094↓ 779.4K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0