Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,677
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,687 recordsRanked by popularity · browse by tag · record statistics
npm
26Criticalhealth index
normalize/mz
modernize node.js to current ECMAScript standards
JavaScript★ 1,369↓ 259M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · npm
36At riskhealth index
amnuts/opcache-gui
A clean, effective and responsive interface for Zend OPcache
PHP · JavaScript★ 1,362↓ 80.4K/moJul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
38At riskhealth index
bitfoundation/bitplatform
Build all of your apps using what you already know and love ❤️
C# · HTML★ 1,359Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
32At riskhealth index
kubenetworks/kubevpn
KubeVPN offers a Cloud Native Dev Environment that connects to kubernetes cluster network.
Go★ 1,355Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
36At riskhealth index
subsquid/squid-sdk
TypeScript ETL toolkit for indexing Ethereum, Solana, and Substrate data, sourced from SQD Network.
TypeScript★ 1,334Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
PyPI
39At riskhealth index
pypa/pip-audit
Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them
Python★ 1,333↓ 24.2M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
33At riskhealth index
sourcey/sourcey
Precision documentation from OpenAPI, MCP, Doxygen, and Markdown guides. Static HTML you own.
TypeScript★ 1,332↓ 4,079/moJul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
php-http/discovery
Finds installed clients and message factories
PHP★ 1,324↓ 8.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · Maven
38At riskhealth index
software-mansion/react-native-enriched-html
HTML-based Rich Text solution for React Native
C · TypeScript · Objective-C++★ 1,322↓ 116.4K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
php-http/message
HTTP Message related tools
PHP★ 1,318↓ 4.9M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
40At riskhealth index
deckhouse/deckhouse
Kubernetes platform from Flant
Go★ 1,317Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
42At riskhealth index
isaacs/node-graceful-fs
fs with incremental backoff on EMFILE
JavaScript★ 1,303↓ 753M/moJul 22, 2026
BlueOak-1.0.0Jul 22, 2026 · metrics 1.13.0
PyPI
40At riskhealth index
pahaz/sshtunnel
SSH tunnels to remote server.
Python★ 1,294↓ 26.9M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
30At riskhealth index
vercel/arg
Simple argument parsing
JavaScript★ 1,294↓ 451M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
micromatch/picomatch
Blazing fast and accurate glob matcher written JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions. Used by GraphQL, Jest, Astro, Snowpack, Storybook, bulma, Serverless, fdir, Netlify, AWS Amplify, Revogrid, rollup, routify, open-wc, imba, ava, docusaurus, fast-glob, globby, chokidar, anymatch, cloudflare/miniflare, pts, and more than 5 million projects! Please follow picomatch's author: https://github.com/jonschlinkert
JavaScript★ 1,280↓ 1.7B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
oasdiff/oasdiff
OpenAPI Diff and Breaking Changes
Go★ 1,279Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Nyholm/psr7
A super lightweight PSR-7 implementation
PHP★ 1,276↓ 8.1M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
Anorov/PySocks
A SOCKS proxy client and wrapper for Python.
Python★ 1,274Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
laradumps/laradumps
🛻 LaraDumps is a friendly app designed to boost your Laravel PHP coding and debugging experience.
PHP★ 1,266↓ 108K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
spatialaudio/python-sounddevice
:sound: Play and Record Sound with Python :snake:
Python★ 1,259Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
29Criticalhealth index
tim-kos/node-retry
Abstraction for exponential and custom retry strategies for failed operations.
JavaScript★ 1,258↓ 434M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Go
33At riskhealth index
gosnmp/gosnmp
An SNMP library written in Go
Go★ 1,251Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
JamesHeinrich/getID3
No repository description published.
PHP★ 1,236↓ 457.8K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Go
30At riskhealth index
sethvargo/go-envconfig
A Go library for parsing struct tags from environment variables.
Go★ 1,235Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
38At riskhealth index
gajus/eslint-plugin-jsdoc
JSDoc specific linting rules for ESLint.
JavaScript★ 1,221↓ 24.5M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
RubyGems · npm
36At riskhealth index
ai/autoprefixer-rails
Autoprefixer for Ruby and Ruby on Rails
Ruby★ 1,210Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
37At riskhealth index
Koenkk/zigbee-herdsman-converters
Collection of device converters to be used with zigbee-herdsman
TypeScript★ 1,206↓ 175.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems · npm
32At riskhealth index
djezzzl/database_consistency
The tool to avoid various issues due to inconsistencies and inefficiencies between a database schema and application models.
Ruby★ 1,193Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
RubyGems
40At riskhealth index
email-spec/email-spec
Collection of RSpec/MiniTest matchers and Cucumber steps for testing email in a ruby app using ActionMailer or Pony
Ruby★ 1,191Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
25Criticalhealth index
chakki-works/seqeval
A Python framework for sequence labeling evaluation(named-entity recognition, pos tagging, etc...)
Python · Perl★ 1,185Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0