Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,633
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,607 recordsRanked by popularity · browse by tag · record statistics
—
28Criticalhealth index
mz-automation/lib60870
Official repository for lib60870 an implementation of the IEC 60870-5-101/104 protocol (read-only mirror)
C★ 582Jul 19, 2026
GPL-3.0Jul 19, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
dg/bypass-finals
Removes `final` and `readonly` keywords from source code on-the-fly and allows mocking of final methods and classes. It can be used together with any test tool such as PHPUnit or Mockery.
PHP★ 573↓ 956.5K/moJul 24, 2026
Custom licenseJul 24, 2026 · metrics 1.13.0
npm
39At riskhealth index
prescottprue/redux-firestore
Redux bindings for Firestore
JavaScript★ 573↓ 9,593/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
24Criticalhealth index
Qalculate/qalculate-qt
Qalculate! Qt UI
C++★ 572Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
ionelmc/python-redis-lock
Lock context manager implemented via redis SET NX EX and BLPOP.
Python★ 570Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
38At riskhealth index
TheKevJames/coveralls-python
Show coverage stats online via coveralls.io
Python★ 569↓ 1.2M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
fsevents/fsevents
Native access to MacOS FSEvents in Node.js
C · JavaScript★ 569↓ 133M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
46At riskhealth index
RDFLib/sparqlwrapper
A wrapper for a remote SPARQL endpoint
Python★ 567↓ 1.3M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
NuGet
28Criticalhealth index
xBimTeam/XbimEssentials
A .NET library to work with data in the IFC format. This is the core component of the Xbim Toolkit
C#★ 567Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist · RubyGems
46At riskhealth index
SocialConnect/auth
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
PHP★ 565↓ 18.6K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
49At riskhealth index
lerna-lite/lerna-lite
Subset of Lerna in a much smaller & more modular project. Help manage and publish multiple packages in a monorepo/workspace structure
TypeScript★ 565Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
31At riskhealth index
fastschema/fastschema
All-in-One Backend as a Service with Headless CMS Power
Go★ 563Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
49At riskhealth index
rust-random/getrandom
A small cross-platform library for retrieving random data from (operating) system source
Rust★ 563↓ 155M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
DirectoryTree/ImapEngine
Manage mailboxes using IMAP without the PHP extension
PHP★ 559↓ 43.8K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
pnuckowski/aioresponses
Aioresponses is a helper for mock/fake web requests in python aiohttp package.
Python★ 558↓ 10.2M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
—
28Criticalhealth index
sebastienros/parlot
Fast and lightweight parser creation tools
C#★ 557Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
21Criticalhealth index
slopus/happy-cli
Happy Coder CLI to connect your local Claude Code to mobile device
TypeScript★ 557Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm
22Criticalhealth index
moll/json-stringify-safe
Like JSON.stringify, but doesn't throw on circular references
JavaScript★ 556Jul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-diactoros
PSR HTTP Message implementations
PHP★ 553↓ 3.3M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
—
18Criticalhealth index
KeRNeLith/QuikGraph
Generic Graph Data Structures and Algorithms for .NET
C#★ 549Jul 18, 2026
MS-PLJul 18, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
darylldoyle/svg-sanitizer
A PHP SVG/XML Sanitizer
PHP★ 545↓ 1.3M/moJul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
samdark/sitemap
Sitemap and sitemap index builder
PHP★ 541↓ 18.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
13Criticalhealth index
siberiacancode/reactuse
🌌 reactuse the largest and most useful hook library
TypeScript · JavaScript★ 540↓ 21.1K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
21Criticalhealth index
sfztools/sfizz
SFZ parser and synth c++ library, providing a JACK standalone client
C++ · C★ 532Jul 23, 2026
BSD-2-ClauseJul 23, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
jpvanhal/inflection
A port of Ruby on Rails' inflector to Python
Python★ 525Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
46At riskhealth index
sethvargo/go-githubactions
Go SDK for GitHub Actions - easily author GitHub Actions in Go
Go★ 518Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
php-coveralls/php-coveralls
PHP client library for Coveralls API.
PHP★ 515↓ 209.6K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
brianmario/escape_utils
Faster string escaping routines for your ruby apps
C · Ruby★ 514Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0