Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

↗

Reproducible evidenceEvery published result links to inspectable source evidence and methodology.

◇

Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.

≈

Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.

Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories

38,170

Monthly downloads under inspection

379B

Median health index

57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth

Clear filters

1,672 recordsRanked by popularity · browse by tag · record statistics

Packagist

32At riskhealth index

yiisoft/yii-console

Yii console components

PHP★ 70↓ 17.3K/moJul 20, 2026

BSD-3-ClauseJul 20, 2026 · metrics 1.13.0

npm

24Criticalhealth index

zkat/json-parse-better-errors

get better errors

JavaScript★ 70↓ 79.3M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

npm

31At riskhealth index

ViacomInc/data-point

JavaScript Utility for collecting, processing and transforming data

JavaScript★ 69↓ 1,083/moJul 24, 2026

Apache-2.0Jul 24, 2026 · metrics 1.13.0

Packagist

19Criticalhealth index

bizley/yii2-jwt

JWT Integration for Yii 2

PHP★ 69↓ 17.3K/moJul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

npm

20Criticalhealth index

didilinkin/elf-taro

Taro 小程序脚手架 (Taro 3 + Dva + Typescript + Immer) - 内置 Redux 计数器, 异步数据请求与腾讯小程序地图 demo

TypeScript · JavaScript★ 69Jul 23, 2026

MITJul 23, 2026 · metrics 1.13.0

npm

36At riskhealth index

diplodoc-platform/transform

Simple transformer YFM (Yandex Flavored Markdown) to HTML.

TypeScript★ 69↓ 43K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

PyPI

7Criticalhealth index

kmike/text-unidecode

The most basic Text::Unidecode port (licensed under Artistic License or GPL or GPLv2+ - choose whatever you want)

Python★ 69Jul 20, 2026

Custom licenseJul 20, 2026 · metrics 1.13.0

npm

11Criticalhealth index

caiiiycuk/emulators

emulator protocol and backends

C · JavaScript · C++★ 68Jul 20, 2026

GPL-2.0Jul 20, 2026 · metrics 1.13.0

NuGet

8Criticalhealth index

hflabs/dadata-csharp

Data cleansing, enrichment and suggestions via Dadata API

C#★ 68Jul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

31At riskhealth index

otterize/credentials-operator

Automatically register and generate AWS, GCP & Azure IAM roles, X.509 certificates and username/password pairs for Kubernetes pods using cert-manager, CNCF SPIRE or Otterize Cloud

Go★ 68Jul 24, 2026

Apache-2.0Jul 24, 2026 · metrics 1.13.0

RubyGems

24Criticalhealth index

ScotterC/pinecone

Ruby client for Pinecone Vector DB

Ruby★ 67Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

npm

19Criticalhealth index

fjc0k/mounted

基于 Taro 的小程序组件库。

TypeScript · CSS★ 67↓ 153/moJul 23, 2026

MITJul 23, 2026 · metrics 1.13.0

Maven

32At riskhealth index

1c-syntax/mdclasses

Разбор метаданных конфигураций, расширений и т.д. 1С:Предприятие

Java · 1C Enterprise★ 66Jul 21, 2026

LGPL-3.0Jul 21, 2026 · metrics 1.13.0

npm

22Criticalhealth index

bnurbekov/company-email-validator

Checks whether an email is a company email (useful for B2B forms)

JavaScript★ 66↓ 421.2K/moJul 23, 2026

UnlicenseJul 23, 2026 · metrics 1.13.0

npm

36At riskhealth index

curvefi/curve-js

No repository description published.

TypeScript★ 66↓ 18.9K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

30At riskhealth index

jwkohnen/conntrack-stats-exporter

Netfilter Conntrack Stats Exporter

Go · Shell★ 66Jul 20, 2026

GPL-3.0Jul 20, 2026 · metrics 1.13.0

Packagist

44At riskhealth index

roadrunner-php/grpc

:electric_plug: RoadRunner GRPC SDK

PHP★ 66↓ 151.2K/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

npm

41At riskhealth index

jshttp/vary

Manipulate the HTTP Vary header

JavaScript★ 65↓ 389M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

npm

40At riskhealth index

sindresorhus/merge-streams

Merge multiple streams into a unified stream

JavaScript★ 65↓ 127M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

Maven

23Criticalhealth index

subutai-io/peer-os

Subutai is a next generation peer to peer (P2P) cloud computing and Internet of Things platform. Subutai peers collaborate and share resources to create secure virtual environments tying together the shared network and machine resources across peers.

Java · JavaScript★ 65Jul 25, 2026

Apache-2.0Jul 25, 2026 · metrics 1.13.0

PyPI

31At riskhealth index

Placekey/placekey-py

No repository description published.

Python★ 64↓ 87.4K/moJul 24, 2026

Apache-2.0Jul 24, 2026 · metrics 1.13.0

PyPI

39At riskhealth index

pyupio/dparse

A parser for Python dependency files