Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,566
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,601 recordsRanked by popularity · browse by tag · record statistics
Packagist
31At riskhealth index
yiisoft/session
A session service, PSR-15 session middleware, and a flash message service which helps use one-time messages.
PHP★ 20↓ 16K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/user
Convenient user identity management and access checking.
PHP★ 20↓ 6,657/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
—
16Criticalhealth index
EVerest/libslac
Simple ISO15118-3 SLAC implementation
C++★ 19Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Go
34At riskhealth index
deckhouse/deckhouse-cli
Command Line Interface to work with Deckhouse Kubernetes Platform
Go★ 19Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm · Go
10Criticalhealth index
izzzzzi/agent-assh
SSH workflow helper for LLM agents
Go★ 19↓ 651/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
23Criticalhealth index
processone/p1_pgsql
Pure Erlang PostgreSQL driver
Erlang★ 19Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
—
24Criticalhealth index
pyanodon/pyindustry
No repository description published.
Lua★ 19Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/data-response
No repository description published.
PHP★ 19↓ 14.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
—
21Criticalhealth index
processone/p1_mysql
Pure Erlang MySQL driver
Erlang★ 18Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
—
24Criticalhealth index
processone/p1_utils
Erlang Utility Modules from ProcessOne
Erlang★ 18Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
8Criticalhealth index
shayan-shojaei/radar
An interactive terminal API explorer for OpenAPI / Swagger specifications.
Go★ 18Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
sirian/php-yml-parser
No repository description published.
PHP★ 18↓ 1,315/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/request-body-parser
Middleware for parsing various data formats
PHP★ 18↓ 3,855/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
—
28Criticalhealth index
NLog/NLog.MailKit
:mailbox_with_mail: Alternative Mail target for NLog using MailKit
C#★ 17Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
TheDragonCode/pretty-array
Simple conversion of an array to a pretty view
PHP★ 17↓ 467.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
24Criticalhealth index
processone/stringprep
Fast Stringprep implementation for Erlang / Elixir
C★ 17Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
33At riskhealth index
wooorm/zwitch
Handle values based on a property
JavaScript · TypeScript★ 17↓ 175M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/form-model
Provides a base for form models and helps to fill, validate and display them.
PHP★ 17↓ 6,012/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/middleware-dispatcher
PSR-15 middleware dispatcher
PHP★ 17↓ 20.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/yii-event
Events for Yii applications
PHP★ 17↓ 15.6K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
yiisoft/yii-runner
Yii application runner
PHP★ 17↓ 14.4K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/yii-view-renderer
PSR-7 compatible view renderer
PHP★ 17↓ 11.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
Laravel-Lang/json-fallback
Adds support for fallback JSON string translation
PHP★ 16↓ 263.8K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
cspotcode/node-source-map-support
Adds source map support to node.js (for stack traces)
JavaScript★ 16↓ 189M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
30At riskhealth index
microsoft/powerbi-visuals-utils-testutils
Test utility interfaces for testing powerbi custom visuals
TypeScript★ 16↓ 2,165/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Go
31At riskhealth index
oapi-codegen/runtime
No repository description published.
Go★ 16Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
24Criticalhealth index
pyanodon/pyfusionenergy
Py Fusion Energy Mod.
Lua★ 16Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist · npm
18Criticalhealth index
Lupennat/nova-nested-many
Laravel Nova Nested Many
PHP · Vue · JavaScript★ 15↓ 4,961/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
20Criticalhealth index
WalletConnect/auth-client-js
No repository description published.
TypeScript★ 15↓ 52.1K/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist · npm
26Criticalhealth index
danog/php-advanced-json-rpc
Maintained, more advanced PHP implementation of the JSONRPC Protocol 📞❗
PHP★ 15↓ 970.3K/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0