Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,161
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,923 recordsRanked by popularity · browse by tag · record statistics
PyPI
68Goodhealth index
python-poetry/cleo
Cleo allows you to create beautiful and testable command-line interfaces.
Python★ 1,354↓ 47.5M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/parsel
Parsel lets you extract data from XML/HTML documents using XPath or CSS selectors
Python★ 1,354↓ 4.7M/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
crates.io
53Moderatehealth index
pomsky-lang/pomsky
A new, portable, regular expression language
Rust★ 1,353↓ 2,056/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
20At Riskhealth index
gtanner/qrcode-terminal
QRCodes in your terminal, cause thats hot.
JavaScript★ 1,349↓ 26.2M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
48Weakhealth index
tkaitchuck/aHash
aHash is a non-cryptographic hashing algorithm that uses the AES hardware instruction
Rust★ 1,347↓ 48.4M/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
yhat/pandasql
sqldf for pandas
Python★ 1,347Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
65Goodhealth index
microsoft/tslib
Runtime library for TypeScript helpers.
TypeScript · JavaScript★ 1,343↓ 1.6B/moSep 16, 2026
0BSDSep 16, 2026 · metrics 2.10.0
npm
25At Riskhealth index
nashwaan/xml-js
Converter utility between XML text and Javascript object / JSON text.
JavaScript★ 1,340↓ 41.9M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
omnidan/node-emoji
💖 simple emoji support for node.js projects
TypeScript · JavaScript★ 1,340↓ 69.2M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
rbgirshick/yacs
YACS -- Yet Another Configuration System
Python★ 1,338↓ 1.5M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
12Criticalhealth index
caiiiycuk/js-dos
The best API for running dos programs in browser
TypeScript · JavaScript★ 1,336↓ 4,408/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
googlearchive/PyDrive
Google Drive API Python wrapper library
Python★ 1,312Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
21At Riskhealth index
YuzuJS/setImmediate
A cross-browser implementation of the new setImmediate API.
JavaScript★ 1,303↓ 216M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
27At Riskhealth index
mirror-engine/the-mirror
V1, Mirror Classic. V2, Mirror Engine: Join Discord for access.
GDScript · TypeScript★ 1,302Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
41Weakhealth index
isaacs/node-graceful-fs
fs with incremental backoff on EMFILE
JavaScript★ 1,301↓ 742M/moSep 16, 2026
BlueOak-1.0.0Sep 16, 2026 · metrics 2.10.0
npm
46Weakhealth index
gulpjs/vinyl
Virtual file format.
JavaScript★ 1,294↓ 32.7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
40Weakhealth index
liady/webpack-node-externals
Easily exclude node modules in Webpack
JavaScript★ 1,293↓ 41.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
30At Riskhealth index
mb21/panwriter
Markdown editor with pandoc integration and paginated preview.
TypeScript · CSS★ 1,293Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
27At Riskhealth index
felixge/node-dateformat
A node.js package for Steven Levithan's excellent dateFormat() function.
JavaScript★ 1,292↓ 113M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
32At Riskhealth index
vercel/arg
Simple argument parsing
JavaScript★ 1,292↓ 369M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
nicodv/kmodes
Python implementations of the k-modes and k-prototypes clustering algorithms, for clustering categorical data
Python★ 1,285↓ 350.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
koalalorenzo/python-digitalocean
🐍🐳 Python module to manage Digital Ocean droplets
Python★ 1,284↓ 154K/moSep 17, 2026
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mikeal/watch
Utilities for watching file trees in node.js
JavaScript · Shell★ 1,279↓ 3M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
d3/d3-hierarchy
2D layout algorithms for visualizing hierarchical data.
JavaScript★ 1,273↓ 92.2M/moSep 17, 2026
ISCSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
styleguidist/react-docgen-typescript
A simple parser for react properties defined in typescript instead of propTypes.
TypeScript★ 1,266↓ 69M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
42Weakhealth index
gopeak/dectask
简单高效、基于敏捷开发的项目管理工具
JavaScript · PHP · Twig★ 1,264Sep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
27At Riskhealth index
tim-kos/node-retry
Abstraction for exponential and custom retry strategies for failed operations.
JavaScript★ 1,258↓ 408M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
48Weakhealth index
TypeScript★ 1,258↓ 106M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
29At Riskhealth index
arcanis/clipanion
Type-safe CLI library / framework with no runtime dependencies
TypeScript★ 1,257↓ 18.3M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0