Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,417
Monthly downloads under inspection
380B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,764 recordsRanked by popularity · browse by tag · record statistics
Packagist
19Criticalhealth index
unitpay/php-sdk
PHP SDK for Unitpay API https://help.unitpay.ru
PHP★ 41↓ 2,416/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Maven
21Criticalhealth index
yan74/afplib
JAVA Library for reading & writing AFP (Advanced Function Presentation) Files.
Java★ 41Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
yiisoft/db-pgsql
PostgreSQL driver for Yii Database
PHP★ 41↓ 4,762/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/mailer
Generic mailer
PHP★ 41↓ 5,413/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/router-fastroute
Yii Router FastRoute adapter
PHP★ 41↓ 16.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
40At riskhealth index
Bearer/bearer-rules
Rules for Bearer SAST
JavaScript★ 40Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
crates.io
28Criticalhealth index
tiborschneider/prefix-trie
No repository description published.
Rust★ 40↓ 1.8M/moJul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
unitpay/unitpay-php
PHP SDK for Unitpay API https://help.unitpay.ru
PHP★ 40↓ 2,633/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Packagist · npm
34At riskhealth index
DEVizzent/cebe-php-openapi
Read and write OpenAPI yaml/json files and make the content accessible in PHP objects.
PHP★ 39↓ 616.7K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
26Criticalhealth index
jsdom/tr46
An implementation of the Unicode UTS #46: Unicode IDNA Compatibility Processing.
JavaScript★ 39↓ 786M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
19Criticalhealth index
symplify/phpstan-extensions
'ignore' error format, solid Symfony SplFileInfo and other useful extensions for PHPStan
PHP★ 39↓ 283.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
43At riskhealth index
PrestaShop/circuit-breaker
A resilient PHP library that allows to safely make calls to external services
PHP★ 38↓ 200.1K/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
crates.io
28Criticalhealth index
aisk/rust-ping
No repository description published.
Rust★ 38↓ 89.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
30At riskhealth index
chicoxyzzy/node-releases
Node.js releases data
JavaScript★ 38↓ 670M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
38At riskhealth index
gravity-ui/charts
React charting library with 10+ chart types: area, bar, line, pie, scatter, treemap, and more
TypeScript★ 38↓ 34.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
tripolskypetr/agent-swarm-kit
A TypeScript library for building orchestrated framework-agnostic multi-agent AI systems
TypeScript · JavaScript★ 38↓ 2,033/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
29Criticalhealth index
TooTallNate/util-deprecate
The Node.js `util.deprecate()` function with browser support
JavaScript★ 37↓ 646M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
31At riskhealth index
clubpay/ronykit
API Framework supporting REST and RPC.
Go★ 37↓ 0/moJul 13, 2026
BSD-3-ClauseJul 13, 2026 · metrics 1.13.0
RubyGems
47At riskhealth index
dry-rb/dry-logger
Logging library
Ruby★ 37Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
ffi/ffi-compiler
No repository description published.
Ruby★ 37Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
22Criticalhealth index
stefanpenner/get-caller-file
No repository description published.
TypeScript★ 37↓ 477M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/auth
No repository description published.
PHP★ 37↓ 7,798/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/files
Useful methods to manage files and directories
PHP★ 37↓ 49K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
estahn/phpunit-json-assertions
JSON assertions for PHPUnit (including JSON Schema)
PHP★ 36↓ 44.7K/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Packagist · npm
26Criticalhealth index
larajax/larajax
A small, elegant AJAX framework for Laravel
JavaScript★ 36↓ 8,858/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/factory
Object factory that is able to resolve dependencies from PSR-11 container
PHP★ 36↓ 20.6K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
Kozea/cssselect2
CSS selectors for Python ElementTree
Python · HTML★ 35Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Go
9Criticalhealth index
freislot/kiri
Minimalist & smart Go-based TUI assistant for plant care. Tracks watering schedules locally with SQLite, syncs with Open-Meteo API, and supports status bar integrations.
Go★ 35Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0