Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,264
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,690 recordsRanked by popularity · browse by tag · record statistics
npm
29Criticalhealth index
micromatch/to-regex-range
Pass two numbers, get a regex-compatible source string for matching ranges. Fast compiler, optimized regex, and validated against more than 2.78 million test assertions. Useful for creating regular expressions to validate numbers, ranges, years, etc.
JavaScript★ 173↓ 605M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
29Criticalhealth index
beta-team/beta-recsys
Beta-RecSys: Build, Evaluate and Tune Automated Recommender Systems
Python★ 172↓ 124/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
25Criticalhealth index
teambition/merge2
Merge multiple streams into one stream in sequence or parallel (~119M/month downloads).
JavaScript★ 171↓ 479M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
38At riskhealth index
thlorenz/convert-source-map
Converts a source-map from/to different formats.
JavaScript★ 171↓ 805M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
24Criticalhealth index
tonyhffong/Lint.jl
A lint tool for Julia code
Julia★ 171Jul 24, 2026
Custom licenseJul 24, 2026 · metrics 1.13.0
npm
30At riskhealth index
Luligu/matterbridge-zigbee2mqtt
Matterbridge zigbee2mqtt plugin
TypeScript · JavaScript★ 169↓ 8,820/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
npm
26Criticalhealth index
Bunlong/next-qrcode
React hooks for generating QRCode for your next React apps.
TypeScript · JavaScript · HTML★ 167↓ 299K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
NuGet
18Criticalhealth index
Krusen/BencodeNET
.NET library for encoding/decoding bencode and reading/writing torrent files
C#★ 167Jul 20, 2026
UnlicenseJul 20, 2026 · metrics 1.13.0
Packagist
19Criticalhealth index
clue/commander
Finally a sane way to register available commands and arguments and match your command line in PHP
PHP★ 167↓ 535/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
39At riskhealth index
sindresorhus/environment
Check which JavaScript environment your code is running in at runtime: browser, Node.js, Bun, etc
JavaScript★ 167↓ 133M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
yiisoft/validator
Yii validator library
PHP★ 167↓ 18.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
—
9Criticalhealth index
Octonica/ClickHouseClient
ClickHouse .NET Core driver
C#★ 166Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
—
26Criticalhealth index
danipen/TextMateSharp
A port of tm4e to bring TextMate grammars to dotnet ecosystem
C#★ 166Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm
36At riskhealth index
gkz/optionator
JavaScript option parsing and help generation library
LiveScript★ 166↓ 518M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
DaveRandom/LibDNS
DNS implementation in pure PHP
PHP★ 165↓ 2.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · PyPI
36At riskhealth index
Aurorastation/Aurora.3
The code for Aurorastation's new base, forked from Baystation12.
DM★ 161Jul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
16Criticalhealth index
flmnt/graphemer
Unicode character splitter
TypeScript★ 161↓ 195M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
Laravel-Lang/common
Easily connect the necessary language packs to the application
PHP★ 160↓ 258.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
38At riskhealth index
laminas/laminas-validator
Validation classes for a wide range of domains, and the ability to chain validators to create complex validation criteria
PHP★ 160↓ 1.2M/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
VictoriaMetrics/ansible-playbooks
Ansible Playbooks for Victoria Metrics monorepo
Jinja · Makefile · Shell★ 159Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
npm
28Criticalhealth index
jonschlinkert/is-plain-object
Returns true if the given value is an object created by the Object constructor.
HTML · JavaScript★ 158↓ 289M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
20Criticalhealth index
serilog/serilog-extensions-logging-file
Add file logging to ASP.NET Core apps in one line of code.
C# · PowerShell★ 158Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
dropbox/pytest-flakefinder
Runs tests multiple times to expose flakiness.
Python★ 157↓ 1.8M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
13Criticalhealth index
postgrespro/testgres
Testing framework for PostgreSQL and its extensions
Python★ 157↓ 90.7K/moJul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
npm
33At riskhealth index
sindresorhus/merge-descriptors
Merge objects using their property descriptors
JavaScript★ 157↓ 445M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
48At riskhealth index
Kilian/electron-to-chromium
Provides a list of electron-to-chromium version mappings
JavaScript★ 156↓ 722M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Go · PyPI
34At riskhealth index
argoproj-labs/rollouts-plugin-trafficrouter-gatewayapi
The Argo Rollouts plugin implementing the Kubernetes Gateway API specification for using different traffic providers in progressive delivery scenarios
Go★ 156Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
16Criticalhealth index
clue/reactphp-block
Lightweight library that eases using components built for ReactPHP in a traditional, blocking environment.
PHP★ 156↓ 14.7K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
11Criticalhealth index
green-api/whatsapp-api-client-js
This library helps you easily create a javascript application with Whatsapp support
JavaScript★ 154Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0