Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,043
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,660 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At riskhealth index
guzzle/oauth-subscriber
Signs Guzzle requests using OAuth 1.0
PHP★ 240↓ 349.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
sajya/server
Implement the JSON-RPC 2.0 server specification for @Laravel
PHP★ 240↓ 22.5K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
Daydreamer-riri/vite-react-ssg
Static-site generation for React on Vite.
TypeScript★ 238↓ 172.5K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
lpender/bummr
Update your gems in separate commits. Identify any that fail your build.
Ruby★ 237Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
pillarjs/finalhandler
Node.js final http responder
JavaScript★ 237↓ 510M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
29Criticalhealth index
redis-stack/redis-stack
A Redis server with additional database capabilities powered by Redis modules.
Python★ 236Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/di
PSR-11 compatible DI container and injector
PHP★ 236↓ 41.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Hex
34At riskhealth index
erlef/oidcc
OpenId Connect client library in Erlang & Elixir
Erlang · Elixir★ 235↓ 34.7K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
17Criticalhealth index
getsentry/raven-csharp
Superseded by: https://github.com/getsentry/sentry-dotnet
C#★ 232Jul 18, 2026
BSD-3-ClauseJul 18, 2026 · metrics 1.13.0
—
12Criticalhealth index
orange-cpp/omath
Cross-platform modern general purpose game/mods/cheats development framework written in C++23.
C++★ 229Jul 20, 2026
ZlibJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Nyholm/NSA
Writing test code should be simple
PHP★ 228↓ 102K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
Vizonex/Winloop
An Alternative library for uvloop compatability with windows
Cython · Python★ 228Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
30At riskhealth index
ajv-validator/ajv-formats
JSON Schema format validation for Ajv v8+
TypeScript★ 227↓ 440M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
29Criticalhealth index
gecko0307/dlib
Allocators, I/O streams, math, geometry, image and audio processing for D
D★ 226Jul 20, 2026
BSL-1.0Jul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
simple-keyboard/simple-keyboard-layouts
Multi-language virtual keyboard layouts for simple-keyboard
JavaScript · TypeScript★ 225↓ 89.3K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
22Criticalhealth index
isaacs/once
Run a function exactly one time
JavaScript★ 224↓ 542M/moJul 22, 2026
BlueOak-1.0.0Jul 22, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
omarryhan/aiogoogle
Async Google API Client + Async Google Auth
Python★ 224Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
Pylons/hupper
in-process file monitor / reloader for reloading your code automatically during development
Python★ 223Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
—
19Criticalhealth index
paulirish/html5-boilerplate
THIS REPO HAS MOVED! It has a pretty new home at github.com/h5bp ╰☆╮Please click this link below.
JavaScript★ 223Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
aio-libs/aiohttp-cors
CORS support for aiohttp
Python · HTML★ 220Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
25Criticalhealth index
microflo/microflo
Live dataflow programming for microcontrollers and embedded
CoffeeScript · C++★ 220↓ 268/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
Laravel-Lang/publisher
Localization publisher for your Laravel application
PHP★ 218↓ 460.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · npm
32At riskhealth index
twirapp/twir
Twitch chat bot written on Golang and TypeScript.
Go · Vue · TypeScript★ 218Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
40At riskhealth index
isaacs/yallist
Yet Another Linked List
TypeScript · JavaScript★ 217↓ 1.2B/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
38At riskhealth index
yiisoft/db
Yii Database Library
PHP★ 216↓ 25.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
24Criticalhealth index
ckruse/CFPropertyList
Read, write and manipulate both binary and XML property lists as defined by apple
Ruby★ 214Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
grncdr/merge-stream
Merge multiple streams into one interleaved stream
JavaScript★ 212↓ 320M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
25Criticalhealth index
gkz/type-check
a library which allows you to check the types of JavaScript values at runtime with a Haskell like type syntax
LiveScript★ 211↓ 534M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0