Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,784
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,313 recordsRanked by popularity · browse by tag · record statistics
PyPI
22At Riskhealth index
Mimino666/langdetect
Port of Google's language-detection library to Python.
Python★ 1,901↓ 11.3M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
thephpleague/html-to-markdown
Convert HTML to Markdown with PHP
PHP★ 1,900↓ 1.3M/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
microsoft/BlingFire
A lightning fast Finite State machine and REgular expression manipulation library.
C++★ 1,893Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
shouldjs/should.js
BDD style assertions for node.js -- test framework agnostic
JavaScript★ 1,890↓ 19.7M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
43Weakhealth index
feross/buffer
The buffer module from node.js, for the browser.
JavaScript★ 1,888↓ 620M/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
alpacahq/alpaca-trade-api-python
Python client for Alpaca's trade API
Python★ 1,883Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
43Weakhealth index
tdegrunt/jsonschema
JSON Schema validation
JavaScript★ 1,875↓ 25.2M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
crates.io
25At Riskhealth index
mosuka/bayard
A full-text search and indexing server written in Rust.
Rust★ 1,871↓ 15/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
timsainb/noisereduce
Noise reduction in python using spectral gating (speech, bioacoustics, audio, time-domain signals)
Jupyter Notebook★ 1,870↓ 483.9K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
28At Riskhealth index
fent/randexp.js
Create random strings that match a given regular expression.
JavaScript★ 1,867↓ 43.7M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
long2ice/fastapi-cache
fastapi-cache is a tool to cache fastapi response and function result, with backends support redis and memcached.
Python★ 1,866↓ 1.1M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
27At Riskhealth index
alexreardon/tiny-invariant
A tiny invariant function
TypeScript · JavaScript★ 1,864↓ 332M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
14Criticalhealth index
bripkens/connect-history-api-fallback
Fallback to index.html for applications that are using the HTML 5 history API
JavaScript★ 1,856↓ 70.9M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
contiamo/restful-react
A consistent, declarative way of interacting with RESTful backends, featuring code-generation from Swagger and OpenAPI specs 🔥
TypeScript★ 1,856↓ 36.4K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
npm
19Criticalhealth index
JavaScript★ 1,844↓ 48.5M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
descriptinc/descript-audio-codec
State-of-the-art audio codec with 90x compression factor. Supports 44.1kHz, 24kHz, and 16kHz mono/stereo audio.
Python★ 1,842Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
46Weakhealth index
schmittjoh/metadata
Metadata is a library for metadata management in PHP
PHP★ 1,823↓ 2.5M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
DamirSvrtan/fasterer
:zap: Don't make your Rubies go fast. Make them go fasterer ™. :zap:
Ruby★ 1,822Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
21At Riskhealth index
georgezhao2010/midea_ac_lan
Auto-configure and then control your Midea M-Smart devices (Air conditioner, Fan, Water heater, Washer, etc) via local area network.
Python★ 1,822Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
npm
32At Riskhealth index
hughsk/flat
:steam_locomotive: Flatten/unflatten nested Javascript objects
JavaScript★ 1,815↓ 122M/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
48Weakhealth index
frenic/csstype
Strict TypeScript and Flow types for style based on MDN data
TypeScript★ 1,811↓ 612M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
25At Riskhealth index
mridgway/hoist-non-react-statics
Copies non-react specific statics from a child component to a parent component
JavaScript★ 1,800↓ 154M/moAug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
catherinedevlin/ipython-sql
%%sql magic for IPython, hopefully evolving into full SQL client
Python★ 1,798↓ 382.3K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nexxtway/react-rainbow
🌈 React Rainbow Components. Build your web application in a snap.
JavaScript★ 1,793↓ 16.3K/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
41Weakhealth index
ilearnio/module-alias
Register aliases of directories and custom module paths in Node
JavaScript★ 1,789↓ 15.7M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
41Weakhealth index
gettalong/kramdown
kramdown is a fast, pure Ruby Markdown superset converter, using a strict syntax definition and supporting several common extensions.
Ruby · HTML★ 1,779Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 2.10.0
npm
50Moderatehealth index
ThomasAribart/json-schema-to-ts
Infer TS types from JSON schemas 📝
TypeScript★ 1,778↓ 106M/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
npm
27At Riskhealth index
medikoo/memoizee
Complete memoize/cache solution for JavaScript
JavaScript★ 1,778↓ 23M/moAug 13, 2026
ISCAug 13, 2026 · metrics 2.10.0
npm
55Moderatehealth index
Noovolari/leapp
Leapp is the DevTool to access your cloud
TypeScript★ 1,775↓ 29/moAug 28, 2026
MPL-2.0Aug 28, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
django-money/django-money
Money fields for Django forms and models.
Python★ 1,775Aug 13, 2026
Custom licenseAug 13, 2026 · metrics 2.10.0