Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

↗

Reproducible evidenceEvery published result links to inspectable source evidence and methodology.

◇

Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.

≈

Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.

Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories

37,510

Monthly downloads under inspection

379B

Median health index

57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth

Clear filters

1,633 recordsRanked by popularity · browse by tag · record statistics

npm

39At riskhealth index

nuxt/ui

The Intuitive Vue UI Library powered by Reka UI & Tailwind CSS.

TypeScript · Vue★ 6,769↓ 1.8M/moJul 19, 2026

MITJul 19, 2026 · metrics 1.13.0

Packagist

24Criticalhealth index

doctrine/annotations

Annotations Docblock Parser

PHP★ 6,734↓ 6M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

PyPI

40At riskhealth index

uxlfoundation/oneTBB

oneAPI Threading Building Blocks (oneTBB)

C++★ 6,701Jul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

npm

38At riskhealth index

unovue/reka-ui

An open-source UI component library for building high-quality, accessible design systems and web apps for Vue. Previously Radix Vue

Vue · TypeScript★ 6,629↓ 4,327/moJul 14, 2026

MITJul 14, 2026 · metrics 1.13.0

Packagist

33At riskhealth index

sebastianbergmann/object-enumerator

Traverses array structures and object graphs to enumerate all referenced objects

PHP★ 6,533↓ 14.3M/moJul 20, 2026

BSD-3-ClauseJul 20, 2026 · metrics 1.13.0

PyPI

39At riskhealth index

espressif/esptool

Serial utility for flashing, provisioning, and interacting with Espressif SoCs

Python★ 6,417↓ 1.6M/moJul 22, 2026

GPL-2.0Jul 22, 2026 · metrics 1.13.0

RubyGems · npm

49At riskhealth index

hanami/hanami

A flexible framework for maintainable Ruby apps

Ruby★ 6,387Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

Packagist

36At riskhealth index

dnoegel/php-xdg-base-dir

No repository description published.

PHP★ 6,294↓ 1.8M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

Packagist

15Criticalhealth index

sebastianbergmann/resource-operations

Provides a list of PHP built-in functions that operate on resources

PHP★ 6,268↓ 6.7M/moJul 22, 2026

Custom licenseJul 22, 2026 · metrics 1.13.0

—

48At riskhealth index

Neargye/magic_enum

Static reflection for enums (to string, from string, iteration) for modern C++, work with any enum type without any macro or boilerplate code

C++★ 6,145Jul 21, 2026

MITJul 21, 2026 · metrics 1.13.0

npm · RubyGems

32At riskhealth index

redmine/redmine

Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp

Ruby · HTML★ 5,987Jul 20, 2026

Custom licenseJul 20, 2026 · metrics 1.13.0

PyPI · crates.io

49At riskhealth index

zizmorcore/zizmor

Static analysis for GitHub Actions

Rust★ 5,886Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

npm

52Moderatehealth index

prettier/eslint-config-prettier

Turns off all rules that are unnecessary or might conflict with Prettier.

JavaScript★ 5,884↓ 251M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

PyPI

38At riskhealth index

aiogram/aiogram

aiogram is a modern and fully asynchronous framework for Telegram Bot API written in Python using asyncio

Python★ 5,798Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

8Criticalhealth index

disintegration/imaging

Imaging is a simple image processing package for Go

Go★ 5,744Jul 21, 2026

MITJul 21, 2026 · metrics 1.13.0

RubyGems

24Criticalhealth index

mislav/will_paginate

Pagination library for Rails and other Ruby applications

Ruby★ 5,691Jul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

—

34At riskhealth index

c3lang/c3c

Compiler for the C3 language

C3 · C★ 5,680Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

npm · Maven

29Criticalhealth index

crazycodeboy/react-native-splash-screen

A splash screen for react-native, hide when application loaded ,it works on iOS and Android.

Java · Objective-C★ 5,657↓ 374.9K/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

NuGet · PyPI

32At riskhealth index

ClosedXML/ClosedXML

ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.

C#★ 5,654Jul 18, 2026

MITJul 18, 2026 · metrics 1.13.0

npm

31At riskhealth index

lukeed/polka

A micro web server so fast, it'll make you dance! :dancers:

JavaScript★ 5,585↓ 125M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

Packagist

36At riskhealth index

spatie/browsershot

Convert HTML to an image, PDF or string