Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
35,684
Monthly downloads under inspection
378B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
291 recordsRanked by popularity · browse by tag · record statistics
npm
40At riskhealth index
ReactiveX/rxjs
A reactive programming library for JavaScript
TypeScript★ 31.7K↓ 394M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
56Moderatehealth index
caolan/async
Async utilities for node and the browser
JavaScript★ 28.2K↓ 385M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
mishoo/UglifyJS
JavaScript parser / mangler / compressor / beautifier toolkit
JavaScript★ 13.4K↓ 169M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
29Criticalhealth index
tj/co
The ultimate generator based flow-control goodness for nodejs (supports thunks, promises, etc)
JavaScript★ 11.8K↓ 162M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
php-fig/container
No repository description published.
PHP★ 10K↓ 18.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
28Criticalhealth index
lukeed/clsx
A tiny (239B) utility for constructing `className` strings conditionally.
JavaScript★ 9,817↓ 442M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
terkelg/prompts
❯ Lightweight, beautiful and user-friendly interactive prompts
JavaScript★ 9,307↓ 206M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
39At riskhealth index
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
JavaScript★ 8,857↓ 656M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
php-fig/simple-cache
No repository description published.
PHP★ 8,079↓ 15.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
enquirer/enquirer
Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert
JavaScript · SCSS★ 7,949↓ 129M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
phar-io/version
Library for handling version information and constraints
PHP★ 7,477↓ 14.4M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
37At riskhealth index
unjs/consola
🐨 Elegant Console Logger for Node.js and Browser
TypeScript★ 7,303↓ 215M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
json5/json5
JSON5 — JSON for Humans
JavaScript★ 7,146↓ 811M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm · PyPI
34At riskhealth index
jquery/esprima
ECMAScript parsing infrastructure for multipurpose analysis
TypeScript · JavaScript★ 7,140↓ 430M/moJul 22, 2026
BSD-2-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
php-fig/http-message
The purpose of this PSR is to provide a set of common interfaces for HTTP messages as described in RFC 7230 and RFC 7231
PHP★ 7,047↓ 19.2M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
doctrine/annotations
Annotations Docblock Parser
PHP★ 6,734↓ 6M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
dnoegel/php-xdg-base-dir
No repository description published.
PHP★ 6,294↓ 1.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
15Criticalhealth index
sebastianbergmann/resource-operations
Provides a list of PHP built-in functions that operate on resources
PHP★ 6,268↓ 6.7M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
52Moderatehealth index
prettier/eslint-config-prettier
Turns off all rules that are unnecessary or might conflict with Prettier.
JavaScript★ 5,884↓ 251M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · Maven
29Criticalhealth index
crazycodeboy/react-native-splash-screen
A splash screen for react-native, hide when application loaded ,it works on iOS and Android.
Java · Objective-C★ 5,657↓ 374.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
lukeed/polka
A micro web server so fast, it'll make you dance! :dancers:
JavaScript★ 5,585↓ 125M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · Maven
29Criticalhealth index
itinance/react-native-fs
Native filesystem access for react-native
C++ · C# · Objective-C★ 5,042↓ 2.2M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
symfony/polyfill-php72
Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions
Mixed★ 4,731↓ 4.4M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
22Criticalhealth index
facebook/prop-types
Runtime type checking for React props and similar objects
JavaScript★ 4,453↓ 396M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
NuGet
19Criticalhealth index
nefarius/ViGEmBus
Windows kernel-mode driver emulating well-known USB game controllers.
C++★ 4,234Jul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 1.13.0
npm
22Criticalhealth index
facebook/regenerator
Source transformer enabling ECMAScript 6 generator functions in JavaScript-of-today.
JavaScript★ 3,826↓ 758.7K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
ralouphie/getallheaders
PHP getallheaders polyfill
PHP★ 3,794↓ 18.9M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
css/csso
CSS minifier with structural optimizations
JavaScript · CSS★ 3,788↓ 117M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
mathiasbynens/he
A robust HTML entity encoder/decoder written in JavaScript.
JavaScript★ 3,601↓ 159M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
TehShrike/deepmerge
A library for deep (recursive) merging of Javascript objects
JavaScript★ 2,816↓ 336M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0