Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

↗

Reproducible evidenceEvery published result links to inspectable source evidence and methodology.

◇

Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.

≈

Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.

Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories

37,052

Monthly downloads under inspection

379B

Median health index

57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth

Clear filters

1,584 recordsRanked by popularity · browse by tag · record statistics

npm

36At riskhealth index

yagop/node-telegram-bot-api

Telegram Bot API for NodeJS

TypeScript★ 9,188↓ 907.5K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

npm

39At riskhealth index

node-fetch/node-fetch

A light-weight module that brings the Fetch API to Node.js

JavaScript★ 8,857↓ 656M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

PyPI · npm

38At riskhealth index

LearningCircuit/local-deep-research

~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.

Python · JavaScript★ 8,752↓ 10.3K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

npm

37At riskhealth index

Shopify/react-native-skia

High-performance React Native Graphics using Skia

TypeScript · C++★ 8,457Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

npm

34At riskhealth index

fengyuanchen/viewerjs

JavaScript image viewer.

JavaScript★ 8,229↓ 503.5K/moJul 23, 2026

MITJul 23, 2026 · metrics 1.13.0

Packagist

25Criticalhealth index

php-fig/simple-cache

No repository description published.

PHP★ 8,079↓ 15.5M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

—

37At riskhealth index

SixLabors/ImageSharp

:camera: A modern, cross-platform, 2D Graphics library for .NET

C#★ 8,012Jul 20, 2026

Custom licenseJul 20, 2026 · metrics 1.13.0

npm

32At riskhealth index

enquirer/enquirer

Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert

JavaScript · SCSS★ 7,949↓ 129M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

PyPI

34At riskhealth index

PyMySQL/PyMySQL

MySQL client library for Python

Python★ 7,844Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

Packagist

37At riskhealth index

Laravel-Lang/lang

List of 128 languages for Laravel Framework, Laravel Jetstream, Laravel Fortify, Laravel Breeze, Laravel Cashier, Laravel Nova and Laravel UI.

PHP★ 7,777↓ 400K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

Packagist

37At riskhealth index

predis/predis

A flexible and feature-complete Redis/Valkey client for PHP.

PHP★ 7,774↓ 6.8M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

Packagist

35At riskhealth index

webmozarts/assert

Assertions to validate method input/output with nice error messages.

PHP★ 7,651↓ 12.3M/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

37At riskhealth index

evrone/go-clean-template

Clean Architecture template for Golang services

Go★ 7,636Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

RubyGems

45At riskhealth index

github-changelog-generator/github-changelog-generator

Automatically generate change log from your tags, issues, labels and pull requests on GitHub.

Ruby★ 7,525Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

—

30At riskhealth index

ninenines/cowboy

Small, fast, modern HTTP server for Erlang/OTP.

Erlang★ 7,521Jul 20, 2026

ISCJul 20, 2026 · metrics 1.13.0

Packagist

30At riskhealth index

phar-io/version

Library for handling version information and constraints

PHP★ 7,477↓ 14.4M/moJul 22, 2026

BSD-3-ClauseJul 22, 2026 · metrics 1.13.0

PyPI

34At riskhealth index

gorakhargosh/watchdog

Python library and shell utilities to monitor filesystem events.

Python · C++★ 7,383Jul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

npm

37At riskhealth index

unjs/consola

🐨 Elegant Console Logger for Node.js and Browser

TypeScript★ 7,303↓ 215M/moJul 22, 2026

Custom licenseJul 22, 2026 · metrics 1.13.0

npm

26Criticalhealth index

imgly/background-removal-js

Remove backgrounds from images directly in the browser environment with ease and no additional costs or privacy concerns. Explore an interactive demo.

TypeScript · JavaScript★ 7,233↓ 640.3K/moJul 21, 2026

AGPL-3.0Jul 21, 2026 · metrics 1.13.0

PyPI

32At riskhealth index

mher/flower

Real-time monitor and web admin for Celery distributed task queue

Python · HTML★ 7,221↓ 12.9M/moJul 21, 2026

Custom licenseJul 21, 2026 · metrics 1.13.0

npm

32At riskhealth index

json5/json5

JSON5 — JSON for Humans