Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,420
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,608 recordsRanked by popularity · browse by tag · record statistics
Packagist
30At riskhealth index
viest/php-ext-xlswriter
🚀 PHP Extension for creating and reader XLSX files.
C★ 2,374↓ 65/moJul 22, 2026
BSD-2-ClauseJul 22, 2026 · metrics 1.13.0
npm · crates.io
33At riskhealth index
IrosTheBeggar/mStream
The easiest music streaming server available
JavaScript★ 2,357↓ 387/moJul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Hex
30At riskhealth index
edgurgel/httpoison
Yet Another HTTP client for Elixir powered by hackney
Elixir★ 2,297↓ 602K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
38At riskhealth index
gotd/td
Telegram client, in Go. (MTProto API)
Go★ 2,288Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
php-fig/event-dispatcher
No repository description published.
PHP★ 2,286↓ 16.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
28Criticalhealth index
vkurko/calendar
Full-sized drag & drop JavaScript event calendar with resource & timeline views
JavaScript · Svelte★ 2,252Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
orchestral/testbench
Laravel Testing Helper for Packages Development
PHP★ 2,231↓ 1.1M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
RubixML/ML
A high-level machine learning and deep learning library for the PHP language.
PHP★ 2,199↓ 56.1K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
28Criticalhealth index
evanw/node-source-map-support
Adds source map support to node.js (for stack traces)
JavaScript★ 2,191↓ 491M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
SergeyPirogov/webdriver_manager
No repository description published.
Python★ 2,188↓ 11.1M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
crates.io
36At riskhealth index
rust-lang/cc-rs
Rust library for build scripts to compile C/C++ code into a Rust library
Rust★ 2,141↓ 128M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
alexei/sprintf.js
sprintf.js is a complete open source JavaScript sprintf implementation
JavaScript★ 2,140↓ 377M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
—
27Criticalhealth index
corecoding/Vitals
A glimpse into your computer's temperature, voltage, fan speed, memory usage and CPU load.
JavaScript★ 2,122Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 1.13.0
NuGet
26Criticalhealth index
rosenbjerg/FFMpegCore
A .NET FFMpeg/FFProbe wrapper for easily integrating media analysis and conversion into your C# applications
C#★ 2,092Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
18Criticalhealth index
msaktype/stylefmt
stylefmt is a tool that automatically formats stylesheets.
JavaScript · CSS★ 2,084Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
crates.io
34At riskhealth index
rust-lang/git2-rs
libgit2 bindings for Rust
Rust★ 2,075↓ 10.6M/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
spiral/framework
High-Performance PHP Framework
PHP★ 2,059↓ 121.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
k0kubun/pp
Colored pretty printer for Go language
Go★ 2,049Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
28Criticalhealth index
epoberezkin/fast-deep-equal
The fastest deep equality check with Date, RegExp and ES6 Map, Set and typed arrays support
JavaScript★ 2,047↓ 743M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
18Criticalhealth index
airsonic/airsonic
:satellite: :cloud: :notes:Airsonic, a Free and Open Source community driven media server (fork of Subsonic and Libresonic)
Java · JavaScript★ 2,046Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
test-prof/test-prof
Ruby Tests Profiling Toolbox
Ruby★ 2,041Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
36At riskhealth index
saltcorn/saltcorn
Free and open source no-code application builder
JavaScript · TypeScript★ 2,035↓ 22.3K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
rubycdp/ferrum
Headless Chrome Ruby API
Ruby · HTML★ 2,033Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
29Criticalhealth index
ruby-prof/ruby-prof
A ruby profiler. See https://ruby-prof.github.io for more information.
Ruby · C★ 2,030Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
RubyGems
26Criticalhealth index
Microsoft/ClearScript
A library for adding scripting to .NET applications. Supports V8 (Windows, Linux, macOS) and JScript/VBScript (Windows).
C#★ 2,025Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go
30At riskhealth index
melbahja/goph
🤘 The native golang ssh client to execute your commands over ssh connection. 🚀🚀
Go★ 1,982Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
28Criticalhealth index
melbahja/ssh
🤘 The native golang ssh client to execute your commands over ssh connection. 🚀🚀
Go★ 1,978Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
42At riskhealth index
mafintosh/why-is-node-running
Node is running but you don't know why? why-is-node-running is here to help you.
JavaScript★ 1,948↓ 268M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
brick/money
A money and currency library for PHP
PHP★ 1,918↓ 1.3M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
40At riskhealth index
getsentry/sentry-php
The official PHP SDK for Sentry (sentry.io)
PHP★ 1,913↓ 6.8M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0