Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

↗

Reproducible evidenceEvery published result links to inspectable source evidence and methodology.

◇

Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.

≈

Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.

Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories

38,405

Monthly downloads under inspection

380B

Median health index

57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth

Clear filters

1,762 recordsRanked by popularity · browse by tag · record statistics

npm

49At riskhealth index

elevenlabs/cli

Command Line Interface to interact with ElevenLabs voice agents

TypeScript★ 73↓ 18.7K/moJul 23, 2026

MITJul 23, 2026 · metrics 1.13.0

npm

16Criticalhealth index

Swyftx/crypto-address-validator

Useful library for validation of Bitcoin, Litecoin, Ethereum and other cryptocoin addresses

JavaScript★ 72↓ 18.7K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

31At riskhealth index

annetutil/gnetcli

The ultimate solution for CLI automation in Golang

Go★ 71Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

Packagist

30At riskhealth index

awcodes/shout

A simple inline contextual notice for Filament forms and infolist, basically just a fancy placeholder.

PHP · Blade★ 71↓ 35K/moJul 21, 2026

MITJul 21, 2026 · metrics 1.13.0

PyPI

14Criticalhealth index

rohe/pyoidc

A complete OpenID Connect implementation in Python

Python★ 71Jul 22, 2026

Custom licenseJul 22, 2026 · metrics 1.13.0

Maven

22Criticalhealth index

spinnaker/fiat

Spinnaker auth service

Java · Groovy · Kotlin★ 71Jul 25, 2026

Apache-2.0Jul 25, 2026 · metrics 1.13.0

crates.io

32At riskhealth index

ydb-platform/ydb-rs-sdk

No repository description published.

Rust★ 71↓ 39K/moJul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

npm

25Criticalhealth index

JsCommunity/make-error

Make your own error types!

JavaScript★ 70↓ 198M/moJul 22, 2026

ISCJul 22, 2026 · metrics 1.13.0

Packagist

28Criticalhealth index

codeigniter4/devkit

Development toolkit for CodeIgniter libraries and projects

PHP · Ruby★ 70↓ 5,581/moJul 24, 2026

MITJul 24, 2026 · metrics 1.13.0

Packagist

22Criticalhealth index

miladrahimi/php-jwt

A PHP implementation of JWT (JSON Web Token) generator, parser, verifier, and validator.

PHP★ 70↓ 4,343/moJul 23, 2026

MITJul 23, 2026 · metrics 1.13.0

Packagist · npm

30At riskhealth index

tobyzerner/json-api-server

A JSON:API server implementation in PHP.

PHP★ 70↓ 12.6K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

Packagist

32At riskhealth index

yiisoft/yii-console

Yii console components

PHP★ 70↓ 17.3K/moJul 20, 2026

BSD-3-ClauseJul 20, 2026 · metrics 1.13.0

npm

24Criticalhealth index

zkat/json-parse-better-errors

get better errors

JavaScript★ 70↓ 79.3M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

npm

31At riskhealth index

ViacomInc/data-point

JavaScript Utility for collecting, processing and transforming data

JavaScript★ 69↓ 1,083/moJul 24, 2026

Apache-2.0Jul 24, 2026 · metrics 1.13.0

Packagist

19Criticalhealth index

bizley/yii2-jwt

JWT Integration for Yii 2

PHP★ 69↓ 17.3K/moJul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

npm

20Criticalhealth index

didilinkin/elf-taro

Taro 小程序脚手架 (Taro 3 + Dva + Typescript + Immer) - 内置 Redux 计数器, 异步数据请求与腾讯小程序地图 demo

TypeScript · JavaScript★ 69Jul 23, 2026

MITJul 23, 2026 · metrics 1.13.0

npm

36At riskhealth index

diplodoc-platform/transform

Simple transformer YFM (Yandex Flavored Markdown) to HTML.

TypeScript★ 69↓ 43K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

PyPI

7Criticalhealth index

kmike/text-unidecode

The most basic Text::Unidecode port (licensed under Artistic License or GPL or GPLv2+ - choose whatever you want)

Python★ 69Jul 20, 2026

Custom licenseJul 20, 2026 · metrics 1.13.0

npm

11Criticalhealth index

caiiiycuk/emulators

emulator protocol and backends

C · JavaScript · C++★ 68Jul 20, 2026

GPL-2.0Jul 20, 2026 · metrics 1.13.0

NuGet

8Criticalhealth index

hflabs/dadata-csharp

Data cleansing, enrichment and suggestions via Dadata API

C#★ 68Jul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

31At riskhealth index

otterize/credentials-operator

Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using cert-manager, CNCF SPIRE or Otterize Cloud

Go★ 68Jul 24, 2026

Apache-2.0Jul 24, 2026 · metrics 1.13.0

RubyGems

24Criticalhealth index

ScotterC/pinecone

Ruby client for Pinecone Vector DB

Ruby★ 67Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

npm

19Criticalhealth index

fjc0k/mounted

基于 Taro 的小程序组件库。