Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
35,688
Monthly downloads under inspection
378B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,434 recordsRanked by popularity · browse by tag · record statistics
PyPI · npm
38At riskhealth index
LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
Python · JavaScript★ 8,752↓ 10.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
37At riskhealth index
Shopify/react-native-skia
High-performance React Native Graphics using Skia
TypeScript · C++★ 8,457Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
php-fig/simple-cache
No repository description published.
PHP★ 8,079↓ 15.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
37At riskhealth index
SixLabors/ImageSharp
:camera: A modern, cross-platform, 2D Graphics library for .NET
C#★ 8,012Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
enquirer/enquirer
Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert
JavaScript · SCSS★ 7,949↓ 129M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
PyMySQL/PyMySQL
MySQL client library for Python
Python★ 7,844Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
Laravel-Lang/lang
List of 128 languages for Laravel Framework, Laravel Jetstream, Laravel Fortify, Laravel Breeze, Laravel Cashier, Laravel Nova and Laravel UI.
PHP★ 7,777↓ 400K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
predis/predis
A flexible and feature-complete Redis/Valkey client for PHP.
PHP★ 7,774↓ 6.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
webmozarts/assert
Assertions to validate method input/output with nice error messages.
PHP★ 7,651↓ 12.3M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
37At riskhealth index
evrone/go-clean-template
Clean Architecture template for Golang services
Go★ 7,636Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
30At riskhealth index
ninenines/cowboy
Small, fast, modern HTTP server for Erlang/OTP.
Erlang★ 7,521Jul 20, 2026
ISCJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
phar-io/version
Library for handling version information and constraints
PHP★ 7,477↓ 14.4M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
gorakhargosh/watchdog
Python library and shell utilities to monitor filesystem events.
Python · C++★ 7,383Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
37At riskhealth index
unjs/consola
🐨 Elegant Console Logger for Node.js and Browser
TypeScript★ 7,303↓ 215M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
imgly/background-removal-js
Remove backgrounds from images directly in the browser environment with ease and no additional costs or privacy concerns. Explore an interactive demo.
TypeScript · JavaScript★ 7,233↓ 640.3K/moJul 21, 2026
AGPL-3.0Jul 21, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
mher/flower
Real-time monitor and web admin for Celery distributed task queue
Python · HTML★ 7,221↓ 12.9M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
32At riskhealth index
json5/json5
JSON5 — JSON for Humans
JavaScript★ 7,146↓ 811M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm · PyPI
34At riskhealth index
jquery/esprima
ECMAScript parsing infrastructure for multipurpose analysis
TypeScript · JavaScript★ 7,140↓ 430M/moJul 22, 2026
BSD-2-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
php-fig/http-message
The purpose of this PSR is to provide a set of common interfaces for HTTP messages as described in RFC 7230 and RFC 7231
PHP★ 7,047↓ 19.2M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
hamcrest/hamcrest-php
PHP Hamcrest implementation [Official]
PHP★ 7,004↓ 10.2M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Maven
38At riskhealth index
sqldelight/sqldelight
SQLDelight - Generates typesafe Kotlin APIs from SQL
Kotlin★ 6,844Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
39At riskhealth index
nuxt/ui
The Intuitive Vue UI Library powered by Reka UI & Tailwind CSS.
TypeScript · Vue★ 6,769↓ 1.8M/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
doctrine/annotations
Annotations Docblock Parser
PHP★ 6,734↓ 6M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
40At riskhealth index
uxlfoundation/oneTBB
oneAPI Threading Building Blocks (oneTBB)
C++★ 6,701Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
sebastianbergmann/object-enumerator
Traverses array structures and object graphs to enumerate all referenced objects
PHP★ 6,533↓ 14.3M/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
39At riskhealth index
espressif/esptool
Serial utility for flashing, provisioning, and interacting with Espressif SoCs
Python★ 6,417↓ 1.6M/moJul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 1.13.0
RubyGems · npm
49At riskhealth index
hanami/hanami
A flexible framework for maintainable Ruby apps
Ruby★ 6,387Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
dnoegel/php-xdg-base-dir
No repository description published.
PHP★ 6,294↓ 1.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
15Criticalhealth index
sebastianbergmann/resource-operations
Provides a list of PHP built-in functions that operate on resources
PHP★ 6,268↓ 6.7M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0