Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,257
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,690 recordsRanked by popularity · browse by tag · record statistics
npm
34At riskhealth index
yargs/y18n
:ledger: the bare-bones i18n library used by yargs
JavaScript · TypeScript★ 154↓ 622M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
2ik/django-editorjs-fields
Django plugin for using Editor.js
Python · CSS★ 152Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
40At riskhealth index
amphp/parser
A generator parser to make streaming parsers simple.
PHP★ 152↓ 2.9M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
9Criticalhealth index
psinetron/echoes-vault-opencode
Persistent memory plugin for OpenCode. Obsidian-style knowledge base that survives across sessions
TypeScript★ 151↓ 7,788/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
TimelordUK/node-sqlserver-v8
branched from node-sqlserver, SQL server driver compatible with all versions of Node
C++ · JavaScript★ 150↓ 185.3K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
14Criticalhealth index
fitzgen/glob-to-regexp
Convert a glob to a regular expression
JavaScript★ 150↓ 180M/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
20Criticalhealth index
mafintosh/end-of-stream
Call a callback when a readable/writable/duplex stream has completed or failed.
JavaScript★ 150↓ 366M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
31At riskhealth index
processone/xmpp
Erlang/Elixir XMPP parsing and serialization library on top of Fast XML
Erlang★ 150Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
23Criticalhealth index
shaddix/react-query-swagger
Generates react-query hooks based on Swagger API definitions
Liquid · JavaScript★ 148↓ 18K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
18Criticalhealth index
nalgeon/sqlean.py
Python's sqlite3 + extensions
C · Python★ 146Jul 21, 2026
ZlibJul 21, 2026 · metrics 1.13.0
Maven
31At riskhealth index
pgcodekeeper/pgcodekeeper
Eclipse plugin for database schema management
Java★ 146Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
12Criticalhealth index
antigenomics/vdjtools
Analysis of immune repertoire sequencing results
Python★ 144↓ 5,532/moJul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
felixge/node-combined-stream
A stream that emits multiple other streams one after another.
JavaScript★ 144↓ 463M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
31At riskhealth index
tdelenikas/smslib-v3
SMSLib v3.5.x
Java★ 143Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
—
9Criticalhealth index
VahidN/DNTCommon.Web.Core
DNTCommon.Web.Core provides common scenarios' solutions for ASP.NET Core applications.
C#★ 142Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
38At riskhealth index
pymc-devs/pymc-extras
Powerful add-ons for PyMC
Jupyter Notebook★ 142↓ 211.1K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
—
9Criticalhealth index
Taritsyn/BundleTransformer
Bundle Transformer - a modular extension for System.Web.Optimization (also known as the Microsoft ASP.NET Web Optimization Framework).
JavaScript · C#★ 141Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
madpah/requirements-parser
A Pip requirements file parser.
Python★ 141↓ 15.2M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
13Criticalhealth index
VKCOM/icons
Набор SVG иконок, представленный в виде React компонентов.
JavaScript · TypeScript★ 140Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
23Criticalhealth index
fjc0k/taro-axios
在 Taro 中使用 axios。
TypeScript★ 140↓ 667/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
42At riskhealth index
jshttp/proxy-addr
Determine address of proxied request
JavaScript★ 140↓ 356M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
40At riskhealth index
grasmash/expander
This tool expands property references in PHP arrays.
PHP★ 138↓ 1.2M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
44At riskhealth index
radarlabs/s2
Node.js JavaScript / TypeScript bindings for Google S2
C++ · JavaScript★ 138↓ 2,640/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
npm
20Criticalhealth index
ampproject/remapping
Remap sequential sourcemaps through transformations to point at the original source code
TypeScript · JavaScript★ 137↓ 141M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
istanbuljs/v8-to-istanbul
convert from v8 coverage format to istanbul's format
JavaScript★ 137↓ 173M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
RubyGems
49At riskhealth index
metanorma/metanorma
The Metanorma project: www.metanorma.org
Ruby · XSLT★ 137Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
34At riskhealth index
rubygems/gems
Ruby wrapper for the RubyGems.org API
Ruby★ 137Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
24Criticalhealth index
pktharindu/nova-permissions
Add Permissions based authorization for your Nova installation via User-based Roles and Permissions. Roles are defined in the database whereas Permissions are defined in the code base.
PHP · Vue★ 136↓ 12.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
26Criticalhealth index
processone/fast_xml
Fast Expat based Erlang XML parsing library
Erlang · C★ 136Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0