Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,201
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,730 recordsRanked by popularity · browse by tag · record statistics
npm
30At riskhealth index
marcomontalbano/figma-export
Export tool for Figma. You can easily and automatically export your Figma components and use them directly into your website.
TypeScript · HTML★ 347Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
23Criticalhealth index
SimpleBus/message-bus
[READ ONLY] Generic classes and interfaces for messages and message buses. Full documentation can be found here:
PHP★ 346↓ 44K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
—
22Criticalhealth index
pawn-lang/compiler
Pawn compiler for SA-MP with bug fixes and new features - runs on Windows, Linux, macOS
C · Assembly★ 340Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
29Criticalhealth index
dougwilson/nodejs-depd
Deprecate all the things
JavaScript★ 329↓ 499M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
25Criticalhealth index
kframework/c-semantics
Semantics of C in K
C · OCaml★ 328Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
php-mod/curl
This library provides an object-oriented and dependency free wrapper of the PHP cURL extension.
PHP★ 327↓ 284.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
29Criticalhealth index
binance/binance-connector-rust
Simple Rust connector to Binance API
Rust★ 326↓ 9,915/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Maven
21Criticalhealth index
open-osrs/runelite
Actually open source Old School RuneScape client
Java★ 326Jul 24, 2026
BSD-2-ClauseJul 24, 2026 · metrics 1.13.0
Packagist · PyPI
49At riskhealth index
cognesy/instructor-php
Unified LLM API, structured data outputs with LLMs, and agent SDK - in PHP
PHP★ 325↓ 5,250/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Hex
23Criticalhealth index
peburrows/goth
Elixir package for Oauth authentication via Google Cloud APIs
Elixir★ 323↓ 236.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
22Criticalhealth index
epoberezkin/fast-json-stable-stringify
Deterministic JSON.stringify() - a faster version of @substack's json-stable-strigify without jsonify.
JavaScript★ 322↓ 586M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
43At riskhealth index
ungap/structured-clone
A structuredClone polyfill
JavaScript★ 322↓ 295M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
garycourt/uri-js
An RFC 3986 compliant, scheme extendable URI parsing/validating/normalizing/resolving library for JavaScript
JavaScript · TypeScript★ 317↓ 573M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
jonschlinkert/clone-deep
Recursively (deep) clone JavaScript native types, like Object, Array, RegExp, Date as well as primitives. Used by superstruct, merge-deep, and many others!
JavaScript★ 317↓ 110M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
30At riskhealth index
tonkeeper/tongo
Golang SDK for from Tonkeeper team
Go★ 316Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
28Criticalhealth index
startfellows/tongo
Golang SDK for from Tonkeeper team
Go★ 315Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
20Criticalhealth index
polaris-gslb/polaris-gslb
A free, open source GSLB (Global Server Load Balancing) solution.
Python★ 312Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
PyPI
17Criticalhealth index
trezor/trezor-mcu
:lock: Don't use this repo, use the new monorepo instead:
C★ 312Jul 23, 2026
LGPL-3.0Jul 23, 2026 · metrics 1.13.0
Hex
26Criticalhealth index
absinthe-graphql/absinthe_phoenix
No repository description published.
Elixir★ 311↓ 178.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
arsenetar/send2trash
Python library to natively send files to Trash (or Recycle bin) on all platforms.
Python★ 311↓ 43.2M/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
scrapy/cssselect
CSS Selectors for Python
Python★ 309↓ 21.7M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
25Criticalhealth index
webpack/loader-runner
Runs (webpack) loaders
JavaScript★ 307↓ 182M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
16Criticalhealth index
Raynos/xtend
extend like a boss
JavaScript★ 306↓ 298M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
39At riskhealth index
colinodell/json5
UTF-8 compatible JSON5 parser for PHP
PHP★ 306↓ 1.1M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
wbolster/jsonlines
python library to simplify working with jsonlines and ndjson data
Python★ 305Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
windkh/node-red-contrib-telegrambot
Telegram bot nodes for node-red.
JavaScript★ 303↓ 12.8K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
premailer/css_parser
Ruby CSS Parser
Ruby★ 299Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
7Criticalhealth index
floatdrop/require-from-string
Load module from string
JavaScript★ 298↓ 452M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
microsoft/vscode-cordova
A Visual Studio Code extension providing intellisense, debug, and build support for Cordova and Ionic projects.
TypeScript★ 298Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
IntersectMBO/plutus-apps
The Plutus application platform
Haskell★ 297Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0