Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
36,928
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,546 recordsRanked by popularity · browse by tag · record statistics
Packagist
36At riskhealth index
dnoegel/php-xdg-base-dir
No repository description published.
PHP★ 6,294↓ 1.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
15Criticalhealth index
sebastianbergmann/resource-operations
Provides a list of PHP built-in functions that operate on resources
PHP★ 6,268↓ 6.7M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
—
48At riskhealth index
Neargye/magic_enum
Static reflection for enums (to string, from string, iteration) for modern C++, work with any enum type without any macro or boilerplate code
C++★ 6,145Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm · RubyGems
32At riskhealth index
redmine/redmine
Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp
Ruby · HTML★ 5,987Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI · crates.io
49At riskhealth index
zizmorcore/zizmor
Static analysis for GitHub Actions
Rust★ 5,886Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
52Moderatehealth index
prettier/eslint-config-prettier
Turns off all rules that are unnecessary or might conflict with Prettier.
JavaScript★ 5,884↓ 251M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
38At riskhealth index
aiogram/aiogram
aiogram is a modern and fully asynchronous framework for Telegram Bot API written in Python using asyncio
Python★ 5,798Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
8Criticalhealth index
disintegration/imaging
Imaging is a simple image processing package for Go
Go★ 5,744Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
RubyGems
24Criticalhealth index
mislav/will_paginate
Pagination library for Rails and other Ruby applications
Ruby★ 5,691Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
34At riskhealth index
c3lang/c3c
Compiler for the C3 language
C3 · C★ 5,680Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm · Maven
29Criticalhealth index
crazycodeboy/react-native-splash-screen
A splash screen for react-native, hide when application loaded ,it works on iOS and Android.
Java · Objective-C★ 5,657↓ 374.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
NuGet · PyPI
32At riskhealth index
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
C#★ 5,654Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm
31At riskhealth index
lukeed/polka
A micro web server so fast, it'll make you dance! :dancers:
JavaScript★ 5,585↓ 125M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
theseer/tokenizer
A small library for converting tokenized PHP source code into XML (and potentially other formats)
PHP★ 5,199↓ 14.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm · Maven
29Criticalhealth index
itinance/react-native-fs
Native filesystem access for react-native
C++ · C# · Objective-C★ 5,042↓ 2.2M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI · crates.io
49At riskhealth index
pgmq/pgmq
A lightweight message queue. Like AWS SQS and RSMQ but on Postgres.
PLpgSQL · Rust · Python★ 5,028↓ 38.2K/moJul 21, 2026
PostgreSQLJul 21, 2026 · metrics 1.13.0
Packagist
49At riskhealth index
Codeception/Codeception
Full-stack testing PHP framework
PHP★ 4,859↓ 1.3M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
geopy/geopy
Geocoding library for Python.
Python★ 4,836↓ 19M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
16Criticalhealth index
ronggang/transmission-web-control
一个 Transmission 浏览器管理界面。Transmission Web Control is a custom web UI. （该项目不再维护。）
CSS · JavaScript · HTML★ 4,751Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
symfony/polyfill-php72
Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions
Mixed★ 4,731↓ 4.4M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go · RubyGems
39At riskhealth index
werf/werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
Go★ 4,713Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
38At riskhealth index
SteveLTN/https-portal
A fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker.
Ruby · HTML★ 4,697Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
jendrikseipp/vulture
Find dead Python code
Python★ 4,697Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
22Criticalhealth index
facebook/prop-types
Runtime type checking for React props and similar objects
JavaScript★ 4,453↓ 396M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
archtechx/tenancy
Automatic multi-tenancy for Laravel. No code changes needed.
PHP★ 4,377↓ 580.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
38At riskhealth index
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
PHP★ 4,287↓ 387.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
NuGet
19Criticalhealth index
nefarius/ViGEmBus
Windows kernel-mode driver emulating well-known USB game controllers.
C++★ 4,234Jul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 1.13.0
Go
26Criticalhealth index
XTLS/RealiTLScanner
A TLS server scanner for Reality
Go★ 4,177Jul 20, 2026
MPL-2.0Jul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
TypeScript★ 4,101↓ 2.2M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
taiga-family/taiga-ui
Angular components library for awesome people
TypeScript · HTML★ 4,023Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0