Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,573
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,617 recordsRanked by popularity · browse by tag · record statistics
Packagist
21Criticalhealth index
roadrunner-php/tcp
🔌 TCP Worker Client for RoadRunner application server
PHP★ 9↓ 123.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
spiral/dumper
Colorful variable dumper: HTML, logs and CLI support. Subtree split of the Spiral Dumper component (see spiral/framework)
PHP★ 9↓ 118.8K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
23Criticalhealth index
wooorm/character-entities
Map of named character references.
JavaScript★ 9↓ 197M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/longest-streak
Count the longest repeating streak of a substring
JavaScript★ 9↓ 164M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/request-provider
Provides current PSR-7 request as a dependency.
PHP★ 9↓ 11.6K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-roles
[READ ONLY] Jetpack Roles. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 8↓ 150.9K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
crates.io
27Criticalhealth index
CreepySkeleton/proc-macro-error
mirror of https://gitlab.com/CreepySkeleton/proc-macro-error
Rust★ 8↓ 28.1M/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
Laravel-Lang/actions
Translation of buttons and other action elements
PHP★ 8↓ 191.8K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
35At riskhealth index
MartiUK/cmder
Lovely console emulator package for Windows
C++ · PowerShell★ 8Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
PyPI
19Criticalhealth index
clbarnes/backports.strenum
Base class for creating enumerated constants that are also subclasses of `str`
Python★ 8↓ 8.4M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
10Criticalhealth index
dantetemplar/fastapi-swagger
This plugin updates the FastAPI app to include a latest Swagger UI distribution.
Python★ 8↓ 27.1K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
exordos/exordos
CLI + DevTools to manage life cycle of Exordos projects
Python★ 8Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Maven
20Criticalhealth index
junxworks/junx
Junx toolkit是类似于google guava一样的工具包，辅助java开发人员开发应用程序，可以灵活构建服务器端应用程序，提供统一kv缓存接口封装，简单易懂的事件总线event bus，简单的生命周期管理接口service，常用工具类封装等。
Java★ 8Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mezzio/mezzio-authorization-rbac
RBAC permission adapter for mezzio-authorization
PHP★ 8↓ 5,605/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mezzio/mezzio-csrf
CSRF token generation and validation for PSR-7 and PSR-15 applications using mezzio-session
PHP★ 8↓ 7,192/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
—
44At riskhealth index
siderolabs/toolchain
No repository description published.
Makefile · Shell★ 8Jul 23, 2026
MPL-2.0Jul 23, 2026 · metrics 1.13.0
Go
9Criticalhealth index
sirkon/protoast
Lightweight Protobuf AST & type resolver for Go. No C++ dependencies, pure Go.
Go★ 8Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Hex
15Criticalhealth index
stephlow/ansi_to_html
No repository description published.
Elixir★ 8↓ 7,730/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
JBZoo/Cli
The framework helps create complex CLI apps and provides new tools for Symfony/Console, Symfony/Process.
PHP★ 7↓ 8,035/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
8Criticalhealth index
TheKhanj/salsa
TCP load balancer proxy with health checks
Go · Makefile · Shell★ 7Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
NuGet
30At riskhealth index
VirtoCommerce/vc-build
Virto Commerce CLI
C#★ 7Jul 24, 2026
Custom licenseJul 24, 2026 · metrics 1.13.0
npm
26Criticalhealth index
XhmikosR/download
Download and extract files
JavaScript★ 7↓ 15.1M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
18Criticalhealth index
c0re100/gotdlib
Fork for modded TDLib
Go★ 7Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
12Criticalhealth index
jtprogru/go-monkill
A very simple utility that allows you to run the desired command or script as soon as a certain process with a known PID completes correctly or with an error.
Go★ 7Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Packagist
42At riskhealth index
kiwilan/php-xml-reader
PHP package to read XML with nice API.
PHP★ 7↓ 19.4K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
19Criticalhealth index
laborin/pico-xbar
Put the output from any script or program into your macOS Menu Bar (xbar fork)
Go · Objective-C★ 7Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Maven · npm
7Criticalhealth index
lounres/Kone
[WIP] Kotlin library for pure mathematics computational experiments
Kotlin★ 7Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
RubyGems
49At riskhealth index
metanorma/metanorma-ietf
Metanorma processor for IETF documents
Ruby★ 7Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
Go
33At riskhealth index
paketo-buildpacks/poetry
No repository description published.
Go · Shell★ 7Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0