Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

↗

Reproducible evidenceEvery published result links to inspectable source evidence and methodology.

◇

Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.

≈

Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.

Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories

37,673

Monthly downloads under inspection

379B

Median health index

57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth

Clear filters

1,665 recordsRanked by popularity · browse by tag · record statistics

Packagist

25Criticalhealth index

Toflar/state-set-index

Implementation of the State Set Index Algorithm in PHP

PHP★ 13↓ 24K/moJul 20, 2026

No licenseJul 20, 2026 · metrics 1.13.0

Hex

17Criticalhealth index

balance-platform/ex_unit_summary

"Extension" for ExUnit

Elixir★ 13↓ 2,619/moJul 20, 2026

No licenseJul 20, 2026 · metrics 1.13.0

Hex

27Criticalhealth index

edgurgel/ham

Library to validate function arguments and return values against their typespecs. Extracted out from Hammox

Elixir★ 13↓ 120.9K/moJul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

24Criticalhealth index

hossein1376/kamune

Communication over untrusted networks

Go · Svelte★ 13Jul 18, 2026

MITJul 18, 2026 · metrics 1.13.0

—

29Criticalhealth index

initCommerce/gato

A dart utility library inspired by javascript lodash library.

Dart★ 13Jul 24, 2026

MITJul 24, 2026 · metrics 1.13.0

—

18Criticalhealth index

nikitalita/gdsdecomp

Godot reverse engineering tools

C++★ 13Jul 18, 2026

MITJul 18, 2026 · metrics 1.13.0

—

24Criticalhealth index

pyanodon/pypetroleumhandling

No repository description published.

Lua★ 13Jul 20, 2026

Custom licenseJul 20, 2026 · metrics 1.13.0

npm

27Criticalhealth index

samn/json-stable-stringify

deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results

JavaScript★ 13↓ 508M/moJul 22, 2026

Custom licenseJul 22, 2026 · metrics 1.13.0

Packagist

31At riskhealth index

yiisoft/cache-file

Yii Cache Library - File Handler

PHP★ 13↓ 7,843/moJul 20, 2026

BSD-3-ClauseJul 20, 2026 · metrics 1.13.0

Packagist

32At riskhealth index

yiisoft/mailer-symfony

Yii Framework Symfony Mailer Integration

PHP★ 13↓ 3,097/moJul 20, 2026

BSD-3-ClauseJul 20, 2026 · metrics 1.13.0

PyPI

24Criticalhealth index

AdguardTeam/NativeLibsCommon

Native libs common

C++★ 12Jul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

PyPI

22Criticalhealth index

astronomer/astro-airflow-mcp

MCP server for Apache Airflow instances. Runs standalone or as an Airflow plugin.

Python★ 12Jul 24, 2026

Apache-2.0Jul 24, 2026 · metrics 1.13.0

28Criticalhealth index

goreflect/go_structor

Go configurator structures library

Go★ 12Jul 19, 2026

MITJul 19, 2026 · metrics 1.13.0

29Criticalhealth index

goreflect/gostructor

Go configurator structures library

Go★ 12Jul 19, 2026

MITJul 19, 2026 · metrics 1.13.0

26Criticalhealth index

kamune-org/kamune

Communication over untrusted networks

Go · Svelte★ 12Jul 15, 2026

MITJul 15, 2026 · metrics 1.13.0

24Criticalhealth index

kamune/kamune

Communication over untrusted networks

Go · Svelte★ 12Jul 17, 2026

MITJul 17, 2026 · metrics 1.13.0

Packagist

42At riskhealth index

marineusde/larapex-charts

A Laravel wrapper for apex charts

PHP★ 12↓ 3,491/moJul 24, 2026

MITJul 24, 2026 · metrics 1.13.0

—

15Criticalhealth index

rsyslog/libestr

OFFICIAL libestr repository on github

C★ 12Jul 22, 2026

Custom licenseJul 22, 2026 · metrics 1.13.0

npm

33At riskhealth index

wooorm/bail

Throw if given an error

JavaScript · TypeScript★ 12↓ 169M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

npm

15Criticalhealth index

CycloneDX/cdxgen-action

GitHub action for CycloneDX BOM generator (cdxgen). cdxgen produced bom xml file can be uploaded to dependency track, AppThreat and other commercial Software Composition Analysis (SCA) products

JavaScript★ 11Jul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

Maven

11Criticalhealth index

appKODE/build-publish-plugin

Gradle plugin for Android that automates build publishing: consistent artifact naming + changelog/release notes generation, and variant-aware uploads to Firebase App Distribution, Confluence, Telegram, Slack and more

Kotlin★ 11Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

Packagist

30At riskhealth index

composer-unused/contracts

Contract repository for composer-unused

PHP★ 11↓ 380.9K/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

Packagist · npm

20Criticalhealth index

dnwjn/nova-button

A Nova package for rendering buttons on different views.