Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,579
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,294 recordsRanked by popularity · browse by tag · record statistics
Go
32At riskhealth index
xssnick/tonutils-go
TON SDK Library in pure Golang for interacting with The Open Network ecosystem using native protocols, such as ADNL, RLDP and etc.
Go★ 688Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
Intervention/validation
Missing Laravel Validation Rules
PHP★ 678↓ 153.2K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go · npm
34At riskhealth index
umputun/revdiff
TUI for reviewing diffs, files, and documents with inline annotations
Go★ 678↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
—
9Criticalhealth index
VahidN/iTextSharp.LGPLv2.Core
iTextSharp.LGPLv2.Core is an unofficial port of the last LGPL version of the iTextSharp (V4.1.6) to .NET Core
C#★ 676Jul 15, 2026
Custom licenseJul 15, 2026 · metrics 1.13.0
npm
36At riskhealth index
una-ui/una-ui
The Atomic UI framework for Nuxt, powered by Unocss engine 💛
Vue · TypeScript★ 671↓ 7,912/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go · npm
31At riskhealth index
syncyomi/syncyomi
SyncYomi is an open-source project crafted to provide a seamless synchronization experience for your TachiyomiSY/Mihon (Mihon client is not implemented but it works the same probably will never be implemented)/manga reading progress and library across multiple devices.
Go · Vue★ 667Jul 21, 2026
GPL-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
bybit-exchange/pybit
Official Python3 API connector for Bybit's HTTP and WebSockets APIs.
Python★ 663Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
imengyu/vue3-context-menu
A very simple context menu component for Vue3 一个简洁美观简单的Vue3右键菜单组件
Vue · TypeScript · SCSS★ 661↓ 40.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
40At riskhealth index
sindresorhus/find-up
Find a file or directory by walking up parent directories
JavaScript · TypeScript★ 642↓ 1.2B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI · crates.io
30At riskhealth index
indygreg/python-zstandard
Python bindings to the Zstandard (zstd) compression library
C · Python★ 638Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
thombashi/pytablewriter
pytablewriter is a Python library to write a table in various formats: AsciiDoc / CSV / Elasticsearch / HTML / JavaScript / JSON / LaTeX / LDJSON / LTSV / Markdown / MediaWiki / NumPy / Excel / Pandas / Python / reStructuredText / SQLite / TOML / TSV.
Python★ 630Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
49At riskhealth index
anywherelan/awl
Securely connect your devices into a private network. Mesh VPN, socks5 proxy server/client
Go★ 626Jul 24, 2026
MPL-2.0Jul 24, 2026 · metrics 1.13.0
Go
30At riskhealth index
Leadaxe/singbox-launcher
GUI launcher for sing-box. Written in Go.
Go★ 625Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
LiteSVM/litesvm
No repository description published.
Rust★ 623Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist · npm
32At riskhealth index
thedevdojo/auth
This is the repo for the DevDojo Auth package
Blade · PHP★ 623↓ 45.3K/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
shipmonk-rnd/composer-dependency-analyser
🚀 Fast detection of composer dependency issues (unused dependencies, shadow dependencies, misplaced dependencies)
PHP★ 622↓ 590.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
browserslist/caniuse-lite
A smaller version of caniuse-db, with only the essentials!
JavaScript★ 613↓ 722M/moJul 19, 2026
CC-BY-4.0Jul 19, 2026 · metrics 1.13.0
npm
33At riskhealth index
beaugunderson/ip-address
💻 a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
TypeScript★ 612↓ 368M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
dukeluo/eslint-plugin-check-file
ESLint rules for consistent filename and folder. Allows you to enforce a consistent naming pattern for the filename and folder.
JavaScript★ 608↓ 4.3M/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
danthedeckie/simpleeval
Simple Safe Sandboxed Extensible Expression Evaluator for Python
Python★ 607Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
annotated-types/annotated-types
Reusable constraint types to use with typing.Annotated
Python★ 606↓ 751M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
cmintey/wishlist
Wishlist is a self-hosted wishlist application that you can share with your friends and family. You no longer have to wonder what to get your family for the holidays, simply check their wishlist and claim any available item!
TypeScript · Svelte★ 602Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
gmpy2/gmpy2
General Multi-Precision arithmetic for Python (GMP, MPIR, MPFR, MPC)
C · Python★ 594↓ 544.4K/moJul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 1.13.0
Hex
28Criticalhealth index
msz/hammox
🏝 automated contract testing via type checking for Elixir functions and mocks
Elixir★ 593↓ 81.5K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
31At riskhealth index
gookit/config
📝 Go configuration manage(load,get,set,export). support JSON, YAML, TOML, Properties, INI, HCL, ENV and Flags. Multi file load, data override merge, parse ENV var. Go应用配置加载管理，支持多种格式，多文件加载，远程文件加载，支持数据合并，解析环境变量名
Go★ 586Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
crates.io
36At riskhealth index
solana-foundation/surfpool
Surfpool is where developers start their Solana journey.
Rust★ 583Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
mosquito/aiofile
Real asynchronous file operations with asyncio support.
Python★ 582↓ 73.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
—
28Criticalhealth index
mz-automation/lib60870
Official repository for lib60870 an implementation of the IEC 60870-5-101/104 protocol (read-only mirror)
C★ 582Jul 19, 2026
GPL-3.0Jul 19, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
dg/bypass-finals
Removes `final` and `readonly` keywords from source code on-the-fly and allows mocking of final methods and classes. It can be used together with any test tool such as PHPUnit or Mockery.
PHP★ 573↓ 956.5K/moJul 24, 2026
Custom licenseJul 24, 2026 · metrics 1.13.0