Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,542
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,592 recordsRanked by popularity · browse by tag · record statistics
npm
21Criticalhealth index
sindresorhus/object-assign
ES2015 Object.assign() ponyfill
JavaScript★ 918↓ 607M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
palkan/anyway_config
Configuration library for Ruby gems and applications
Ruby★ 912Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
27Criticalhealth index
libvips/ruby-vips
Ruby extension for the libvips image processing library.
Ruby★ 904Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
33At riskhealth index
dry-rb/dry-types
Flexible type system for Ruby with coercions and constraints
Ruby★ 897Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
48At riskhealth index
estools/esquery
ECMAScript AST query library.
JavaScript★ 887↓ 523M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
35At riskhealth index
beatgammit/base64-js
Base64 encoding/decoding in pure JS
JavaScript★ 880↓ 475M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
31At riskhealth index
ged/ruby-pg
A PostgreSQL client library for Ruby
C · Ruby★ 870Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
—
28Criticalhealth index
MyraUI/Myra
UI Library for MonoGame, FNA and Stride
C#★ 868Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
28Criticalhealth index
sindresorhus/dot-prop
Get, set, or delete a property from a nested object using a dot path
JavaScript★ 868↓ 177M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
32At riskhealth index
hyochan/flutter_calendar_carousel
Calendar widget for flutter that is swipeable horizontally. This widget can help you build your own calendar widget highly customizable.
Dart★ 862Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
18Criticalhealth index
wolever/parameterized
Parameterized testing with any Python test framework
Python★ 856↓ 19.6M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
crates.io
34At riskhealth index
artifact-keeper/artifact-keeper
Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.
Rust★ 855Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
doug-martin/nestjs-query
Easy CRUD for GraphQL.
TypeScript★ 842↓ 111.2K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
37At riskhealth index
epam/ketcher
Web-based molecule sketcher
TypeScript★ 842↓ 10/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Hex
30At riskhealth index
eproxus/meck
A mocking library for Erlang
Erlang★ 838↓ 468.7K/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
ankorstore/yokai
Simple, modular, and observable Go framework for backend applications.
Go★ 837Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
31At riskhealth index
MyGUI/mygui
Fast, flexible and simple GUI.
C++ · C#★ 834Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
30At riskhealth index
xtuc/webassemblyjs
Toolchain for WebAssembly
JavaScript★ 834↓ 724M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
38At riskhealth index
gemini-testing/testplane
Testplane (ex-hermione) browser test runner based on mocha and wdio
TypeScript · JavaScript★ 828↓ 36.9K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
NuGet
32At riskhealth index
DevTeam/Pure.DI
Pure DI for .NET
C#★ 823Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
29Criticalhealth index
spohlenz/tinymce-rails
Integration of TinyMCE with the Rails asset pipeline
JavaScript★ 823Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
—
29Criticalhealth index
alosaur/alosaur
Alosaur - Deno web framework with many ES Decorators
TypeScript★ 817Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
41At riskhealth index
JBZoo/Utils
Collection of useful PHP functions, mini-classes, and snippets for every day.
PHP★ 815↓ 10.5K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
defstudio/telegraph
Telegraph is a Laravel package for fluently interacting with Telegram Bots
PHP★ 815↓ 15.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
24Criticalhealth index
overdrivenpotato/rust-psp
Rust on PSP. Panic and allocation support. Access PSP system libraries.
Rust★ 814↓ 820/moJul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
allure-framework/allure-python
Allure integrations for Python test frameworks
Python★ 811Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
Restream/reindexer
Embeddable, in-memory, document-oriented database with a high-level Query builder interface.
C++ · Lex★ 808Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
npm
44At riskhealth index
browserslist/update-db
CLI tool to update caniuse-lite to refresh target browsers from Browserslist config
JavaScript★ 807↓ 636M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
27Criticalhealth index
mathiasbynens/jsesc
Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.
JavaScript★ 796↓ 638M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
phpstan/phpstan-symfony
Symfony extension for PHPStan
PHP★ 794↓ 2.3M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0