Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,670
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,643 recordsRanked by popularity · browse by tag · record statistics
npm
26Criticalhealth index
XhmikosR/download
Download and extract files
JavaScript★ 7↓ 15.1M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
18Criticalhealth index
c0re100/gotdlib
Fork for modded TDLib
Go★ 7Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
12Criticalhealth index
jtprogru/go-monkill
A very simple utility that allows you to run the desired command or script as soon as a certain process with a known PID completes correctly or with an error.
Go★ 7Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Packagist
42At riskhealth index
kiwilan/php-xml-reader
PHP package to read XML with nice API.
PHP★ 7↓ 19.4K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
19Criticalhealth index
laborin/pico-xbar
Put the output from any script or program into your macOS Menu Bar (xbar fork)
Go · Objective-C★ 7Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Maven · npm
7Criticalhealth index
lounres/Kone
[WIP] Kotlin library for pure mathematics computational experiments
Kotlin★ 7Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
RubyGems
49At riskhealth index
metanorma/metanorma-ietf
Metanorma processor for IETF documents
Ruby★ 7Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
Go
33At riskhealth index
paketo-buildpacks/poetry
No repository description published.
Go · Shell★ 7Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
25Criticalhealth index
rashfael/buntpapier
mixin-based component library
Stylus · Vue · JavaScript★ 7↓ 10.3K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
spiral/code-style
Code-Style sniffer and fixer rules and CLI command
PHP★ 7↓ 15K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
umbrellio/ci_helper
CIHelper is a gem with Continuous Integration helpers for Ruby
Ruby★ 7Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
29Criticalhealth index
umbrellio/utils
Utils for Ruby On Rails
Ruby★ 7Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
yiisoft/dummy-provider
Dummy implementation provider used for testing packages requiring implementations
Mixed★ 7↓ 3,449/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
—
16Criticalhealth index
Arachnid/go-ethereum
Official golang implementation of the Ethereum protocol
Go★ 6Jul 22, 2026
LGPL-3.0Jul 22, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-composer-plugin
[READ ONLY] A custom installer plugin for Composer to move Jetpack packages out of `vendor/` so WordPress's translation infrastructure will find their strings. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 6↓ 1,989/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
Automattic/jetpack-jitm
[READ ONLY] Jetpack Just In Time Messages. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 6↓ 1,928/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-redirect
[READ ONLY] A Jetpack package containing functionality to generate URLs to the jetpack.com/redirect service. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 6↓ 149K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-sync
[READ ONLY] Everything needed to allow syncing to the WP.com infrastructure. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 6↓ 21K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
CodersCare/gridelements
Be part of the future of TYPO3! Support Gridelements now and unlock exclusive early access to v13! The well-established Gridelements V12 elevates TYPO3 by bringing grid-based layouts to content elements, with powerful features like advanced drag & drop and real references. Supercharge your workflow and make daily tasks easier. Sponsor us here:
PHP · JavaScript★ 6↓ 8,460/moJul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
Go
35At riskhealth index
Kong/go-database-reconciler
No repository description published.
Go★ 6Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
9Criticalhealth index
Taritsyn/AutoprefixerHost
.NET wrapper around the Andrey Sitnik's Autoprefixer.
JavaScript · C#★ 6Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
49At riskhealth index
aiven/go-client-codegen
A code generated Go client for Aiven API
Go★ 6Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
RubyGems
49At riskhealth index
metanorma/metanorma-iho
Metanorma for the International Hydrographic Organization
XSLT · Ruby★ 6Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mezzio/mezzio-authorization
Authorization middleware for Mezzio and PSR-7 applications
PHP★ 6↓ 6,471/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
39At riskhealth index
veronalabs/wp-scoper
A Composer plugin that prefixes namespaces in WordPress plugin dependencies to prevent conflicts
PHP★ 6↓ 2,228/moJul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/ccount
Count how often a substring occurs
JavaScript★ 6↓ 163M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
11Criticalhealth index
ASDAlexey/vitest-auto-spy
Auto-generate fully-typed test spies from a class — across Vitest, Bun & node:test, with Angular/NestJS/React/Vue/Svelte recipes. A jest-auto-spies drop-in replacement.
TypeScript★ 5↓ 5,712/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm · Packagist
28Criticalhealth index
Automattic/jetpack-components
[READ ONLY] Set of React components used by the Jetpack plugin. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
TypeScript · JavaScript · SCSS★ 5↓ 1,672/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
27Criticalhealth index
Automattic/jetpack-connection
[READ ONLY] Jetpack Connection. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 5↓ 147.7K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-constants
[READ ONLY] A wrapper for defining constants in a more testable way. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 5↓ 156.3K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0