Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,286
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,746 recordsRanked by popularity · browse by tag · record statistics
npm
34At riskhealth index
microsoft/vscode-cordova
A Visual Studio Code extension providing intellisense, debug, and build support for Cordova and Ionic projects.
TypeScript★ 298Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
43At riskhealth index
sisinflab/elliot
Comprehensive and Rigorous Framework for Reproducible Recommender Systems Evaluation
Python★ 298Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
IntersectMBO/plutus-apps
The Plutus application platform
Haskell★ 297Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
npm
24Criticalhealth index
publishlab/node-acme-client
Simple and unopinionated ACME client for Node.js
JavaScript★ 295↓ 567.7K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go · npm
38At riskhealth index
smart-mcp-proxy/mcpproxy-go
Supercharge AI Agents, Safely
Go★ 295Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
23Criticalhealth index
piotrmurach/tty-logger
A readable, structured and beautiful logging for the terminal
Ruby★ 293Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Maven · npm · RubyGems
27Criticalhealth index
wuba/taro-playground
The Taro Playground App is a cross-platform application developed using Taro, to help developers develop and debug Taro applications.
TypeScript★ 293Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
bizley/yii2-migration
Yii 2 Migration Creator And Updater
PHP★ 291↓ 4,308/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
NuGet
23Criticalhealth index
MizunagiKB/gd_cubism
Unofficial Live2D Player for Godot Engine
C++ · CSS★ 289Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
npm
47At riskhealth index
ehmicky/human-signals
Human-friendly process signals
JavaScript · TypeScript★ 286↓ 513M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
openSUSE/opi
OBS Package Installer (CLI)
Python★ 285Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
23Criticalhealth index
jonschlinkert/is-number
JavaScript/Node.js utility. Returns `true` if the value is a number or string number. Useful for checking regex match results, user input, parsed strings, etc.
JavaScript★ 284↓ 714M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
zertosh/loose-envify
Like envify but much faster
JavaScript★ 283↓ 434M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · crates.io · PyPI
36At riskhealth index
LTplus-AG/ifc-lite
Parse, view, query, edit, and export IFC, IDS, BCF, pointclouds and more AEC stuff. In the browser, server or desktop.
TypeScript · Rust · C#★ 282↓ 17.7K/moJul 21, 2026
MPL-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
dpranke/pyjson5
A Python implementation of the JSON5 data format
Python★ 282Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
ncr/rack-proxy
A request/response rewriting HTTP proxy. A Rack app.
Ruby★ 282Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
20Criticalhealth index
then/is-promise
Test whether an object looks like a promises-a+ promise
JavaScript★ 282↓ 256M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
19Criticalhealth index
Azure/azure-sdk-for-ruby
Ruby SDK for Azure Resource Manager: build and manage your Azure cloud infrastructure (Compute, Virtual Networks, Storage, etc...) using Ruby.
Ruby★ 279Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
43At riskhealth index
pycroscopy/pycroscopy
Scientific analysis of nanoscale materials imaging data
Jupyter Notebook★ 279Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
32At riskhealth index
PasarGuard/node
PasarGuard Node | Decentralized Censorship-Resistant Access Layer
Go★ 277Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
kerlenton/mcpsnoop
Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.
Go★ 276Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
23Criticalhealth index
inyutin/aiohttp_retry
Simple retry client for aiohttp.
Python★ 273Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
orchestral/testbench-core
The Testing Framework for Laravel Development
PHP · Blade★ 272↓ 1.5M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
amphp/socket
Non-blocking socket and TLS functionality for PHP based on Amp.
PHP★ 267↓ 2.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
didww/credit_card_validations
:credit_card: ruby gem for validating credit cards, generating credit card numbers, Luhn checks
Ruby★ 266Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
41At riskhealth index
jshttp/accepts
Higher-level content negotiation
JavaScript★ 266↓ 493M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
14Criticalhealth index
mbk-dev/okama
Investment portfolio and stocks analyzing tools for Python with free historical data
Python★ 266Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
23Criticalhealth index
ARM-software/SCP-firmware
This System Control Processor (SCP) firmware repository is no longer used and has been set to Read-only for archiving purposes. Please refer to the following active repository.
C★ 265Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
—
10Criticalhealth index
VahidN/DNTCaptcha.Core
DNTCaptcha.Core is a captcha generator and validator for ASP.NET Core applications
SCSS · HTML · JavaScript★ 265Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
npm
35At riskhealth index
radix-ng/primitives
Headless, signals-first UI primitives for Angular. Accessible. Customizable.
TypeScript★ 265↓ 9,283/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0