Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,182
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,717 recordsRanked by popularity · browse by tag · record statistics
npm
39At riskhealth index
sindresorhus/node-defaults
Easily handle defaults for your options
JavaScript · TypeScript★ 76↓ 198M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
1inch/fusion-sdk
No repository description published.
TypeScript★ 75↓ 76K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
codecov/codecov-ruby
Ruby uploader for Codecov
Ruby★ 75Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
dotzero/git-profile
↔️ Git Profile helps you manage multiple Git identities and switch between them per repository
Go★ 75Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
mostafaznv/larupload
Larupload is an ORM based file uploader for laravel to upload image, video, audio and other known files.
PHP★ 75↓ 22.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
probots-io/pinecone-php
A beautiful, extendable PHP Package to communicate with your pinecone.io indices, collections and vectors.
PHP★ 75↓ 13.4K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
flachesis/gemini-rust
A comprehensive Rust client library for Google's Gemini.
Rust★ 74↓ 5,093/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
marcalexiei/eslint-zod
ESLint plugin that adds custom linting rules to enforce best practices when using Zod
TypeScript★ 74Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/rbac
Role based access control
PHP★ 74↓ 10.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
codeigniter4/queue
Queues for the CodeIgniter 4 framework
PHP★ 73↓ 14.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
duncan3dc/fork-helper
A PHP helper to fork processes and allow multi-threading
PHP★ 73↓ 7,907/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
elevenlabs/cli
Command Line Interface to interact with ElevenLabs voice agents
TypeScript★ 73↓ 18.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
16Criticalhealth index
Swyftx/crypto-address-validator
Useful library for validation of Bitcoin, Litecoin, Ethereum and other cryptocoin addresses
JavaScript★ 72↓ 18.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
31At riskhealth index
annetutil/gnetcli
The ultimate solution for CLI automation in Golang
Go★ 71Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
awcodes/shout
A simple inline contextual notice for Filament forms and infolist, basically just a fancy placeholder.
PHP · Blade★ 71↓ 35K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
14Criticalhealth index
rohe/pyoidc
A complete OpenID Connect implementation in Python
Python★ 71Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Maven
22Criticalhealth index
spinnaker/fiat
Spinnaker auth service
Java · Groovy · Kotlin★ 71Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
crates.io
32At riskhealth index
ydb-platform/ydb-rs-sdk
No repository description published.
Rust★ 71↓ 39K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
25Criticalhealth index
JsCommunity/make-error
Make your own error types!
JavaScript★ 70↓ 198M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
codeigniter4/devkit
Development toolkit for CodeIgniter libraries and projects
PHP · Ruby★ 70↓ 5,581/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
miladrahimi/php-jwt
A PHP implementation of JWT (JSON Web Token) generator, parser, verifier, and validator.
PHP★ 70↓ 4,343/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist · npm
30At riskhealth index
tobyzerner/json-api-server
A JSON:API server implementation in PHP.
PHP★ 70↓ 12.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/yii-console
Yii console components
PHP★ 70↓ 17.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
31At riskhealth index
ViacomInc/data-point
JavaScript Utility for collecting, processing and transforming data
JavaScript★ 69↓ 1,083/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Packagist
19Criticalhealth index
bizley/yii2-jwt
JWT Integration for Yii 2
PHP★ 69↓ 17.3K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
20Criticalhealth index
didilinkin/elf-taro
Taro 小程序 脚手架 (Taro 3 + Dva + Typescript + Immer) - 内置 Redux 计数器, 异步数据请求 与 腾讯小程序地图 demo
TypeScript · JavaScript★ 69Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
36At riskhealth index
diplodoc-platform/transform
Simple transformer YFM (Yandex Flavored Markdown) to HTML.
TypeScript★ 69↓ 43K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
7Criticalhealth index
kmike/text-unidecode
The most basic Text::Unidecode port (licensed under Artistic License or GPL or GPLv2+ - choose whatever you want)
Python★ 69Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
11Criticalhealth index
caiiiycuk/emulators
emulator protocol and backends
C · JavaScript · C++★ 68Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 1.13.0