Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,510
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,633 recordsRanked by popularity · browse by tag · record statistics
PyPI
30At riskhealth index
jendrikseipp/vulture
Find dead Python code
Python★ 4,697Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
22Criticalhealth index
facebook/prop-types
Runtime type checking for React props and similar objects
JavaScript★ 4,453↓ 396M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
archtechx/tenancy
Automatic multi-tenancy for Laravel. No code changes needed.
PHP★ 4,377↓ 580.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
38At riskhealth index
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
PHP★ 4,287↓ 387.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
NuGet
19Criticalhealth index
nefarius/ViGEmBus
Windows kernel-mode driver emulating well-known USB game controllers.
C++★ 4,234Jul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 1.13.0
Go
26Criticalhealth index
XTLS/RealiTLScanner
A TLS server scanner for Reality
Go★ 4,177Jul 20, 2026
MPL-2.0Jul 20, 2026 · metrics 1.13.0
Packagist · npm
38At riskhealth index
laravel/horizon
Dashboard and code-driven configuration for Laravel queues.
PHP · Vue★ 4,156↓ 3.9M/moJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
npm
38At riskhealth index
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
TypeScript★ 4,101↓ 2.2M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
taiga-family/taiga-ui
Angular components library for awesome people
TypeScript · HTML★ 4,023Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
andialbrecht/sqlparse
A non-validating SQL parser module for Python
Python★ 4,009Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
38At riskhealth index
koxudaxi/datamodel-code-generator
Generate Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON/YAML/CSV.
Python★ 3,972Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
32At riskhealth index
GDRETools/gdsdecomp
Godot reverse engineering tools
C++★ 3,902Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
pika/pika
Pure Python RabbitMQ/AMQP 0-9-1 client library
Python★ 3,871Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
defuse/php-encryption
Simple Encryption in PHP.
PHP★ 3,865↓ 4.7M/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
22Criticalhealth index
facebook/regenerator
Source transformer enabling ECMAScript 6 generator functions in JavaScript-of-today.
JavaScript★ 3,826↓ 758.7K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
40At riskhealth index
TanStack/db
The reactive client store for your API.
TypeScript★ 3,825↓ 5.7M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
ralouphie/getallheaders
PHP getallheaders polyfill
PHP★ 3,794↓ 18.9M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
css/csso
CSS minifier with structural optimizations
JavaScript · CSS★ 3,788↓ 117M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
15Criticalhealth index
GodotSteam/GodotSteam
An ecosystem of tools for Godot Engine and Valve's Steam. For Linux, Mac, and Windows.
Mixed★ 3,726Jul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
—
26Criticalhealth index
martinothamar/Mediator
A high performance implementation of Mediator pattern in .NET using source generators.
C#★ 3,663Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
14Criticalhealth index
yandex/odyssey
Scalable PostgreSQL connection pooler
C★ 3,612Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
mathiasbynens/he
A robust HTML entity encoder/decoder written in JavaScript.
JavaScript★ 3,601↓ 159M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI · npm
32At riskhealth index
pradyunsg/furo
A clean customizable documentation theme for Sphinx
Sass · HTML · Python★ 3,543Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
33At riskhealth index
sharpemu/sharpemu
An experimental PlayStation 5 emulator for Windows, Linux and macOS.
C#★ 3,507Jul 19, 2026
GPL-2.0Jul 19, 2026 · metrics 1.13.0
PyPI
36At riskhealth index
piskvorky/smart_open
Utils for streaming large files (S3, HDFS, gzip, bz2...)
Python★ 3,451↓ 68.7M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
symfony/event-dispatcher-contracts
Generic abstractions related to dispatching event
PHP★ 3,416↓ 16.7M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
padrino/padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
Ruby · Less★ 3,402Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · PyPI
40At riskhealth index
php-curl-class/php-curl-class
PHP Curl Class makes it easy to send HTTP requests and integrate with web APIs
PHP★ 3,301↓ 140.4K/moJul 20, 2026
UnlicenseJul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
pyutils/line_profiler
Line-by-line profiling for Python
Python · Cython★ 3,244Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
35At riskhealth index
pillarjs/iconv-lite
Convert character encodings in pure javascript.
JavaScript★ 3,175↓ 1.1B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0