Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
35,690
Monthly downloads under inspection
378B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,194 recordsRanked by popularity · browse by tag · record statistics
Packagist
35At riskhealth index
webmozarts/assert
Assertions to validate method input/output with nice error messages.
PHP★ 7,651↓ 12.3M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
37At riskhealth index
evrone/go-clean-template
Clean Architecture template for Golang services
Go★ 7,636Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
30At riskhealth index
ninenines/cowboy
Small, fast, modern HTTP server for Erlang/OTP.
Erlang★ 7,521Jul 20, 2026
ISCJul 20, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
gorakhargosh/watchdog
Python library and shell utilities to monitor filesystem events.
Python · C++★ 7,383Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
imgly/background-removal-js
Remove backgrounds from images directly in the browser environment with ease and no additional costs or privacy concerns. Explore an interactive demo.
TypeScript · JavaScript★ 7,233↓ 640.3K/moJul 21, 2026
AGPL-3.0Jul 21, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
mher/flower
Real-time monitor and web admin for Celery distributed task queue
Python · HTML★ 7,221↓ 12.9M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
php-fig/http-message
The purpose of this PSR is to provide a set of common interfaces for HTTP messages as described in RFC 7230 and RFC 7231
PHP★ 7,047↓ 19.2M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
hamcrest/hamcrest-php
PHP Hamcrest implementation [Official]
PHP★ 7,004↓ 10.2M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Maven
38At riskhealth index
sqldelight/sqldelight
SQLDelight - Generates typesafe Kotlin APIs from SQL
Kotlin★ 6,844Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
39At riskhealth index
nuxt/ui
The Intuitive Vue UI Library powered by Reka UI & Tailwind CSS.
TypeScript · Vue★ 6,769↓ 1.8M/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
40At riskhealth index
uxlfoundation/oneTBB
oneAPI Threading Building Blocks (oneTBB)
C++★ 6,701Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
sebastianbergmann/object-enumerator
Traverses array structures and object graphs to enumerate all referenced objects
PHP★ 6,533↓ 14.3M/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
39At riskhealth index
espressif/esptool
Serial utility for flashing, provisioning, and interacting with Espressif SoCs
Python★ 6,417↓ 1.6M/moJul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 1.13.0
RubyGems · npm
49At riskhealth index
hanami/hanami
A flexible framework for maintainable Ruby apps
Ruby★ 6,387Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
48At riskhealth index
Neargye/magic_enum
Static reflection for enums (to string, from string, iteration) for modern C++, work with any enum type without any macro or boilerplate code
C++★ 6,145Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm · RubyGems
32At riskhealth index
redmine/redmine
Mirror of redmine code source - Official Subversion repository is at https://svn.redmine.org/redmine - contact: @vividtone or maeda (at) farend (dot) jp
Ruby · HTML★ 5,987Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI · crates.io
49At riskhealth index
zizmorcore/zizmor
Static analysis for GitHub Actions
Rust★ 5,886Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
38At riskhealth index
aiogram/aiogram
aiogram is a modern and fully asynchronous framework for Telegram Bot API written in Python using asyncio
Python★ 5,798Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
8Criticalhealth index
disintegration/imaging
Imaging is a simple image processing package for Go
Go★ 5,744Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
RubyGems
24Criticalhealth index
mislav/will_paginate
Pagination library for Rails and other Ruby applications
Ruby★ 5,691Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
34At riskhealth index
c3lang/c3c
Compiler for the C3 language
C3 · C★ 5,680Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
NuGet · PyPI
32At riskhealth index
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
C#★ 5,654Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
theseer/tokenizer
A small library for converting tokenized PHP source code into XML (and potentially other formats)
PHP★ 5,199↓ 14.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI · crates.io
49At riskhealth index
pgmq/pgmq
A lightweight message queue. Like AWS SQS and RSMQ but on Postgres.
PLpgSQL · Rust · Python★ 5,028↓ 38.2K/moJul 21, 2026
PostgreSQLJul 21, 2026 · metrics 1.13.0
Packagist
49At riskhealth index
Codeception/Codeception
Full-stack testing PHP framework
PHP★ 4,859↓ 1.3M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
geopy/geopy
Geocoding library for Python.
Python★ 4,836↓ 19M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
16Criticalhealth index
ronggang/transmission-web-control
一个 Transmission 浏览器管理界面。Transmission Web Control is a custom web UI. （该项目不再维护。）
CSS · JavaScript · HTML★ 4,751Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · RubyGems
39At riskhealth index
werf/werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
Go★ 4,713Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
38At riskhealth index
SteveLTN/https-portal
A fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker.
Ruby · HTML★ 4,697Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0