Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,633
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,607 recordsRanked by popularity · browse by tag · record statistics
npm
22Criticalhealth index
stefanpenner/get-caller-file
No repository description published.
TypeScript★ 37↓ 477M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/auth
No repository description published.
PHP★ 37↓ 7,798/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/files
Useful methods to manage files and directories
PHP★ 37↓ 49K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist · npm
26Criticalhealth index
larajax/larajax
A small, elegant AJAX framework for Laravel
JavaScript★ 36↓ 8,858/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/factory
Object factory that is able to resolve dependencies from PSR-11 container
PHP★ 36↓ 20.6K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
Kozea/cssselect2
CSS selectors for Python ElementTree
Python · HTML★ 35Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Go
9Criticalhealth index
freislot/kiri
Minimalist & smart Go-based TUI assistant for plant care. Tracks watering schedules locally with SQLite, syncs with Open-Meteo API, and supports status bar integrations.
Go★ 35Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
httprb/form_data
Utility-belt to build form data request bodies.
Ruby★ 35Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
25Criticalhealth index
jinko-core/jinko
Jinko is a small and safe interpreted language with fast Rust and C FFI
Rust★ 35Jul 24, 2026
GPL-2.0Jul 24, 2026 · metrics 1.13.0
npm
34At riskhealth index
jslicense/spdx-correct.js
correct invalid SPDX identifiers
JavaScript★ 35↓ 155M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go
30At riskhealth index
kovidgoyal/imaging
Go library for dealing with images, colorspaces, metadata, simple transforms
Go★ 35Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-router
Flexible routing for PSR-7 applications
PHP★ 35↓ 629.6K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
umbrellio/laravel-ltree
LTree Extension (PostgreSQL) for Laravel
PHP★ 35↓ 3,360/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
27Criticalhealth index
A11yance/axobject-query
Programmatic access to information about the AXObject Model
JavaScript★ 34↓ 192M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
kevva/astral-regex
Regular expression for matching astral symbols
JavaScript · TypeScript★ 34↓ 129M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
laravel-zero/foundation
This is a mirror from https://github.com/laravel/framework/tree/12.x/src/Illuminate/Foundation
PHP★ 34↓ 56.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
49At riskhealth index
tenphi/tasty
A deterministic styling engine for stateful component systems.
TypeScript★ 34↓ 7,394/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/config
Configuration management
PHP★ 34↓ 18.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/hydrator
Create and populate objects with type casting, mapping and dependencies resolving support.
PHP★ 34↓ 14.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
18Criticalhealth index
alfa-laboratory/alfa-ui-primitives
Alfa-Bank UI primitives for sharing between platforms
JavaScript · Shell★ 33↓ 1,764/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm
31At riskhealth index
calvinmetcalf/process-nextick-args
process.nextTick always accepts args, always
JavaScript★ 33↓ 348M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
go-fries/fries
🚀 Go ecosystem components, such as: Gin, Kratos, Chi, Event, CloudEvents, AMQP, etc. 🌟
Go★ 33Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
17Criticalhealth index
humanwhocodes/object-schema
DEPRECATED. Use eslint/object-schema instead.
JavaScript★ 33↓ 137M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
48At riskhealth index
bnjmnt4n/regjsgen
Generate regular expressions from regjsparser’s AST.
JavaScript★ 32↓ 154M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · npm
28Criticalhealth index
kirschbaum-development/nova-comments
A commenting tool for Laravel Nova
PHP · Vue★ 32↓ 2,780/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
yiisoft/db-migration
The package implementing migration for yiisoft/db.
PHP★ 32↓ 6,978/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
15Criticalhealth index
caiges/Ruby-RC4
Implementation of the RC4 algorithm.
Ruby★ 31Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
core-ds/arui-scripts
Simple but flexible tool to build react applications with nodejs server
TypeScript★ 31Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
gravity-ui/components
A set of complex React components.
TypeScript★ 31↓ 53K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
40At riskhealth index
infection/include-interceptor
Stream Wrapper: Include Interceptor. Allows to replace included (autoloaded) file with another one.
PHP★ 31↓ 1.1M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0