Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,524
Monthly downloads under inspection
380B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,789 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At riskhealth index
dstackai/gpuhunt
GPU prices aggregator for cloud providers
Python★ 49Jul 20, 2026
MPL-2.0Jul 20, 2026 · metrics 1.13.0
Go
35At riskhealth index
essentialkaos/ek
Auxiliary packages for Go
Go★ 49Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
18Criticalhealth index
ferd/cth_readable
Common Test hooks for more readable logs
Erlang★ 49Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/friendly-exception
An interface for an exception to be friendly
PHP★ 49↓ 74.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/strings
String helper methods and an inflector
PHP★ 49↓ 95.2K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/yii2-symfonymailer
Yii 2 Symfony mailer extension.
PHP★ 49↓ 158.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
40At riskhealth index
JBZoo/Mermaid-PHP
Generate diagrams and flowcharts with the help of the mermaid script language
PHP★ 48↓ 29.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
15Criticalhealth index
jonschlinkert/is-windows
Returns true if the platform is Windows (and Cygwin or MSYS/MinGW for unit tests)
JavaScript★ 48↓ 143M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
10Criticalhealth index
malikhan-dev/zenql
An Integrated Query Language For Go. Compiled, Type-Safe And Fast.
Go★ 48Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
RubyGems
43At riskhealth index
savonrb/akami
Building Web Service Security
Ruby★ 48Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
14Criticalhealth index
clap-rs/term_size-rs
Functions for determining terminal sizes in Rust
Rust★ 47Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
26Criticalhealth index
processone/cache_tab
In-memory cache Erlang / Elixir library
Erlang★ 47Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/form
The package helps with implementing data entry forms
PHP★ 47↓ 6,484/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
mime-types/mime-types-data
MIME Type registry data
Ruby★ 46Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
salute-developers/plasma
Salute Design System
TypeScript · MDX★ 46Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
18Criticalhealth index
sanmiguel/websocket_client
Erlang websocket client (ws and wss supported)
Erlang★ 46Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/cache
PSR-16 compatible cache library
PHP★ 46↓ 30.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
yiisoft/data
Generic data abstractions: reading, writing, processing.
PHP★ 46↓ 13.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
NuGet
18Criticalhealth index
cyotek/Cyotek.Drawing.BitmapFont
Component for parsing bitmap font files generated by AngelCode's BMFont utility
C#★ 45Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist · npm
34At riskhealth index
m-a-k-o/nova-custom-table-card
Simple Nova Card for Custom Tables
PHP · Vue★ 45↓ 7,214/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
ruby/forwardable
Provides delegation of specified methods to a designated object
Ruby★ 45Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
crates.io
26Criticalhealth index
huxi/rusty_ulid
Rust ULID (Universally Unique Lexicographically Sortable Identifier) generation and processing
Rust★ 43↓ 9,604/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
15Criticalhealth index
sindresorhus/path-is-absolute
Node.js 0.12 path.isAbsolute() ponyfill
JavaScript★ 43↓ 340M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/db-mysql
MySQL and MariaDB driver for Yii Database
PHP★ 43↓ 7,136/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/log
PSR-3 compatible logger
PHP★ 43↓ 21.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/security
A set of classes to handle common security-related tasks
PHP★ 43↓ 20.4K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
yiisoft/yii-dataview
Data widgets
PHP★ 43↓ 3,697/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Go
31At riskhealth index
Nadim147c/waybar-lyric
🎙️A waybar module for song lyrics
Go★ 42Jul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
—
7Criticalhealth index
ProKn1fe/WebView2.Runtime
Webview2 runtime nuget packages for Fixed Version distribution.
PowerShell · C#★ 42Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0