Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,668
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,628 recordsRanked by popularity · browse by tag · record statistics
Packagist · npm
28Criticalhealth index
kirschbaum-development/nova-comments
A commenting tool for Laravel Nova
PHP · Vue★ 32↓ 2,780/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
yiisoft/db-migration
The package implementing migration for yiisoft/db.
PHP★ 32↓ 6,978/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
15Criticalhealth index
caiges/Ruby-RC4
Implementation of the RC4 algorithm.
Ruby★ 31Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
core-ds/arui-scripts
Simple but flexible tool to build react applications with nodejs server
TypeScript★ 31Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
gravity-ui/components
A set of complex React components.
TypeScript★ 31↓ 53K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
40At riskhealth index
infection/include-interceptor
Stream Wrapper: Include Interceptor. Allows to replace included (autoloaded) file with another one.
PHP★ 31↓ 1.1M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
ipython/matplotlib-inline
Inline Matplotlib backend for Jupyter
Jupyter Notebook★ 31↓ 125M/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
49At riskhealth index
metanorma/html2doc
Ruby gem that converts an HTML page/document into a Microsoft Word `.doc` file
HTML · Ruby · CSS★ 31Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
prontolabs/pronto-reek
Pronto runner for Reek, code smell detector for Ruby
Ruby★ 31Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/access
Access checking abstraction
PHP★ 31↓ 13K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/db-sqlite
SQLite driver for Yii Database
PHP★ 31↓ 10.2K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
30At riskhealth index
emilbayes/siginfo
Utility module to print pretty messages on SIGINFO/SIGUSR1
JavaScript★ 30↓ 225M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
npm
19Criticalhealth index
humanwhocodes/config-array
DEPRECATED. Use eslint/config-array instead
JavaScript★ 30↓ 148M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
—
23Criticalhealth index
kwonoj/protobuf-wasm
No repository description published.
Mixed★ 30Jul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
PyPI
21Criticalhealth index
mcmtroffaes/latexcodec
Lexer and codec to work with LaTeX code in Python. Instead of using latexcodec, I encourage you to consider pylatexenc instead, which is far superior: https://github.com/phfaist/pylatexenc
Python★ 30↓ 1.6M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist · npm
30At riskhealth index
TheDragonCode/codestyler
A tool to automatically fix PHP Coding Standards issues by Dragon Code.
PHP★ 29↓ 31.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
alaz/legitbot
🤔 Is this Web request from a real search engine🕷 or from an impersonating agent 🕵️‍♀️?
Ruby★ 29Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Go
29Criticalhealth index
firefart/nonamedreturns
golang linter to detect named returns
Go★ 29Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-component-installer
Composer plugin for injecting modules and configuration providers into application configuration
PHP★ 29↓ 88.9K/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
—
28Criticalhealth index
pyanodon/pyalienlife
No repository description published.
Lua★ 29Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
—
28Criticalhealth index
sparkfun/SparkFun_Apollo3_AmbiqSuite_BSPs
One-stop-shop for all your AmbiqSuite SDK board support package needs.
C · Makefile★ 29Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/http
Handy HTTP utility such as method constants and status codes
PHP★ 29↓ 30.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/json
JSON encoding and decoding
PHP★ 29↓ 39.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
12Criticalhealth index
JackUait/blok
The best open-source alternative to Notion
TypeScript★ 28↓ 1,004/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
Laravel-Lang/http-statuses
Translation of HTTP statuses
PHP★ 28↓ 265.4K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
10Criticalhealth index
VKCOM/vkid-web-sdk
No repository description published.
TypeScript★ 28↓ 50.4K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · Maven
8Criticalhealth index
Wendor/teapod-tun2socks
No repository description published.
Go · Kotlin · Shell★ 28Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
22Criticalhealth index
elspethsoup/persistent_httparty
Persistent HTTP connections for HTTParty!
Ruby★ 28Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
microsoft/powerbi-visuals-utils-svgutils
SVG utility interfaces for creating powerbi custom visuals
TypeScript★ 28↓ 3,373/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Go
28Criticalhealth index
plesk/pleskapp
A tool to manage Plesk servers remotely from the local console
Go★ 28Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0