Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,727
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,629 recordsRanked by popularity · browse by tag · record statistics
NuGet
18Criticalhealth index
cyotek/Cyotek.Drawing.BitmapFont
Component for parsing bitmap font files generated by AngelCode's BMFont utility
C#★ 45Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist · npm
34At riskhealth index
m-a-k-o/nova-custom-table-card
Simple Nova Card for Custom Tables
PHP · Vue★ 45↓ 7,214/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
ruby/forwardable
Provides delegation of specified methods to a designated object
Ruby★ 45Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
crates.io
26Criticalhealth index
huxi/rusty_ulid
Rust ULID (Universally Unique Lexicographically Sortable Identifier) generation and processing
Rust★ 43↓ 9,604/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
15Criticalhealth index
sindresorhus/path-is-absolute
Node.js 0.12 path.isAbsolute() ponyfill
JavaScript★ 43↓ 340M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/db-mysql
MySQL and MariaDB driver for Yii Database
PHP★ 43↓ 7,136/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/log
PSR-3 compatible logger
PHP★ 43↓ 21.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/security
A set of classes to handle common security-related tasks
PHP★ 43↓ 20.4K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
yiisoft/yii-dataview
Data widgets
PHP★ 43↓ 3,697/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Go
31At riskhealth index
Nadim147c/waybar-lyric
🎙️A waybar module for song lyrics
Go★ 42Jul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
—
7Criticalhealth index
ProKn1fe/WebView2.Runtime
Webview2 runtime nuget packages for Fixed Version distribution.
PowerShell · C#★ 42Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Go
39At riskhealth index
deckhouse/virtualization
Virtualization module for Deckhouse Kubernetes Platform. This repository is a mirror of GitLab repository.
Go★ 42Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
7Criticalhealth index
emmetio/py-emmet
Emmet abbreviation parser and expander, implemented in Python
Python★ 42Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
36At riskhealth index
gravity-ui/navigation
No repository description published.
TypeScript · SCSS★ 42↓ 44.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
pmmp/NBT
PHP library for working with the NBT (Named Binary Tag) data storage format, as designed by Mojang.
PHP★ 42↓ 11.1K/moJul 24, 2026
LGPL-3.0Jul 24, 2026 · metrics 1.13.0
npm
14Criticalhealth index
dominictarr/json-buffer
No repository description published.
JavaScript★ 41↓ 506M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
40At riskhealth index
jsdom/webidl-conversions
Implements the Web IDL algorithms for converting to and from JavaScript values
JavaScript★ 41↓ 812M/moJul 22, 2026
BSD-2-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
laminas/laminas-config-aggregator
Lightweight library for collecting and merging configuration from different sources
PHP★ 41↓ 141.3K/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
19Criticalhealth index
unitpay/php-sdk
PHP SDK for Unitpay API https://help.unitpay.ru
PHP★ 41↓ 2,416/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Maven
21Criticalhealth index
yan74/afplib
JAVA Library for reading & writing AFP (Advanced Function Presentation) Files.
Java★ 41Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
yiisoft/db-pgsql
PostgreSQL driver for Yii Database
PHP★ 41↓ 4,762/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/mailer
Generic mailer
PHP★ 41↓ 5,413/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/router-fastroute
Yii Router FastRoute adapter
PHP★ 41↓ 16.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
40At riskhealth index
Bearer/bearer-rules
Rules for Bearer SAST
JavaScript★ 40Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
crates.io
28Criticalhealth index
tiborschneider/prefix-trie
No repository description published.
Rust★ 40↓ 1.8M/moJul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Packagist · npm
34At riskhealth index
DEVizzent/cebe-php-openapi
Read and write OpenAPI yaml/json files and make the content accessible in PHP objects.
PHP★ 39↓ 616.7K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
26Criticalhealth index
jsdom/tr46
An implementation of the Unicode UTS #46: Unicode IDNA Compatibility Processing.
JavaScript★ 39↓ 786M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
19Criticalhealth index
symplify/phpstan-extensions
'ignore' error format, solid Symfony SplFileInfo and other useful extensions for PHPStan
PHP★ 39↓ 283.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0