Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,675
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,650 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At riskhealth index
mezzio/mezzio-authorization
Authorization middleware for Mezzio and PSR-7 applications
PHP★ 6↓ 6,471/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
39At riskhealth index
veronalabs/wp-scoper
A Composer plugin that prefixes namespaces in WordPress plugin dependencies to prevent conflicts
PHP★ 6↓ 2,228/moJul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/ccount
Count how often a substring occurs
JavaScript★ 6↓ 163M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
11Criticalhealth index
ASDAlexey/vitest-auto-spy
Auto-generate fully-typed test spies from a class — across Vitest, Bun & node:test, with Angular/NestJS/React/Vue/Svelte recipes. A jest-auto-spies drop-in replacement.
TypeScript★ 5↓ 5,712/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm · Packagist
28Criticalhealth index
Automattic/jetpack-components
[READ ONLY] Set of React components used by the Jetpack plugin. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
TypeScript · JavaScript · SCSS★ 5↓ 1,672/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
27Criticalhealth index
Automattic/jetpack-connection
[READ ONLY] Jetpack Connection. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 5↓ 147.7K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-constants
[READ ONLY] A wrapper for defining constants in a more testable way. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 5↓ 156.3K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
23Criticalhealth index
Automattic/jetpack-logo
[READ ONLY] A logo for Jetpack. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 5↓ 5,900/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
23Criticalhealth index
Automattic/jetpack-password-checker
[READ ONLY] Password Checker. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 5↓ 21.1K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-status
[READ ONLY] Jetpack Status. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 5↓ 150.9K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
Laravel-Lang/starter-kits
Translations for Laravel Starter Kits
PHP★ 5↓ 249K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
9Criticalhealth index
LastDragon-ru/lara-asp-graphql
This package provides highly powerful `@searchBy` and `@sortBy` directives for lighthouse-php.
PHP★ 5↓ 4,178/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
32At riskhealth index
deckhouse/dmt
No repository description published.
Go★ 5Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
exordos/gcl_sdk
SDK for Exordos
Python★ 5↓ 6,483/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
28Criticalhealth index
hugr-lab/query-engine
The Hugr query engine
Go★ 5Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
15Criticalhealth index
joakimk/dboard
Dashboard framework
Ruby★ 5Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
laminas/laminas-i18n-phone-number
Validate and format international phone numbers
PHP★ 5↓ 7,724/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
RubyGems
49At riskhealth index
metanorma/isodoc
Generate HTML/Word from Metanorma XML
Ruby★ 5Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
—
26Criticalhealth index
nrfconnect/sdk-hal_nordic
NCS downstream of https://github.com/zephyrproject-rtos/hal_nordic
C★ 5Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
npm
11Criticalhealth index
pshenmic/dash-platform-sdk
A lightweight Javascript Dash Platform SDK
TypeScript★ 5↓ 2,033/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
11Criticalhealth index
runixer/laplaced
A lightweight, self-hosted Personal AI Daemon written in Go. Features Hybrid RAG (SQLite + Vectors), Long-term Memory, and Voice I/O. Optimized for low-end VPS and Raspberry Pi.
Go★ 5Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Maven
22Criticalhealth index
toronik/env
No repository description published.
Kotlin★ 5Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
19Criticalhealth index
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
Go★ 5Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
JavaScript★ 5↓ 164M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
wooorm/is-decimal
Check if a character is decimal
JavaScript★ 5↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
29Criticalhealth index
1c-syntax/bsl-common-library
Библиотека базовых сущностей bsl, mdo
Java★ 4Jul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-a8c-mc-stats
[READ ONLY] Used to record internal usage stats for Automattic. Not visible to site owners. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 150.8K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-admin-ui
[READ ONLY] Generic Jetpack wp-admin UI elements. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 148.8K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-assets
[READ ONLY] Jetpack Asset Management. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 147.9K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0