Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,673
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,295 recordsRanked by popularity · browse by tag · record statistics
npm
33At riskhealth index
harshankur/officeParser
A robust, strictly-typed Node.js and Browser library for parsing office files into a rich Abstract Syntax Tree (AST) and generating high-fidelity output in multiple formats. Parses: docx · pptx · xlsx · odt · odp · ods · pdf · rtf · csv · md · html. Generates: Markdown · HTML · CSV · RTF · PDF · Plain Text · RAG Chunks
Rich Text Format · HTML★ 502↓ 2.1M/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Maven
31At riskhealth index
pdvrieze/xmlutil
XML Serialization library for Kotlin
Kotlin★ 499Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
—
9Criticalhealth index
Taritsyn/WebMarkupMin
The Web Markup Minifier (abbreviated WebMarkupMin) - a .NET library that contains a set of markup minifiers. The objective of this project is to improve the performance of web applications by reducing the size of HTML, XHTML and XML code.
C#★ 496Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
37At riskhealth index
ozontech/file.d
A blazing fast tool for building data pipelines: read, process and output events. Our community: https://t.me/file_d_community
Go★ 496Jul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 1.13.0
Go
26Criticalhealth index
bramvdbogaerde/go-scp
Simple Golang scp client
Go★ 494Jul 19, 2026
MPL-2.0Jul 19, 2026 · metrics 1.13.0
PyPI
18Criticalhealth index
sybrenstuvel/python-rsa
Python-RSA is a pure-Python RSA implementation.
Python★ 489Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
48At riskhealth index
asciidoctor/asciidoctor-diagram
:left_right_arrow: Asciidoctor diagram extension, with support for AsciiToSVG, BlockDiag (BlockDiag, SeqDiag, ActDiag, NwDiag), Ditaa, Erd, GraphViz, Mermaid, Msc, PlantUML, Shaape, SvgBob, Syntrax, UMLet, Vega, Vega-Lite and WaveDrom.
Ruby★ 477Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
NuGet
12Criticalhealth index
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
C# · JavaScript★ 475Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
28Criticalhealth index
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
JavaScript★ 473↓ 60.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI · npm
29Criticalhealth index
erdem/django-map-widgets
Highly customizable, intuitive, and user-friendly map widgets for GeoDjango applications.
JavaScript · Python · HTML★ 471Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
DamienHarper/auditor-bundle
The missing audit log library
PHP · Twig★ 468↓ 97.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
29Criticalhealth index
ricmoo/pyaes
Pure-Python implementation of AES block-cipher and common modes of operation.
Python★ 468↓ 3.1M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
37At riskhealth index
graycoreio/daffodil
Build complex Ecommerce store frontends and connect to any backend https://discord.gg/BdaJVZ53sR
TypeScript★ 459Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
36At riskhealth index
carbon-design-system/carbon-icons-svelte
Carbon Design System SVG icons as Svelte components
TypeScript · Svelte★ 458↓ 85.9K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
carbon-design-system/sveld
Generate TypeScript definitions and component documentation for your Svelte components
TypeScript · Svelte★ 447↓ 17.3K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
mdub/clamp
a Ruby command-line application framework
Ruby★ 447Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
22Criticalhealth index
SherClockHolmes/webpush-go
Web Push API Encryption with VAPID support.
Go · HTML★ 446Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
26Criticalhealth index
tx7do/kratos-transport
kratos transport layer extension, support: rabbitmq,kafka,rocketmq,activemq,apollo,mcp,tcp,websocket...
Go★ 444Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
dry-rb/dry-struct
Typed struct and value objects
Ruby★ 441Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · PyPI
36At riskhealth index
umputun/tg-spam
Anti-spam bot for Telegram and general-purpose anti-spam library and server
Go★ 439Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
38At riskhealth index
Baystation12/Baystation12
Baystation's flavor of Space Station 13
DM★ 425Jul 21, 2026
AGPL-3.0Jul 21, 2026 · metrics 1.13.0
crates.io
29Criticalhealth index
Revertron/Alfis
Alternative Free Identity System
Rust★ 423Jul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
PHP★ 423↓ 26K/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
PyPI · crates.io
12Criticalhealth index
awolverp/cachebox
The fastest memoizing and caching Python library written in Rust.
Rust · Python★ 422↓ 12.3M/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm
41At riskhealth index
paulmillr/readdirp
Recursive version of fs.readdir with small RAM & CPU footprint.
JavaScript · TypeScript★ 421↓ 808M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · Go
13Criticalhealth index
vshulcz/deja-vu
Your agents already solved this. deja finds it — retroactive search and MCP recall over the session logs your coding agents already wrote. Cross-agent, SSH-portable, one zero-dep binary, fully local.
Go★ 419↓ 3,030/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
38At riskhealth index
JetBrains/phpstorm-attributes
PhpStorm specific attributes
PHP★ 416↓ 506.7K/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
27Criticalhealth index
gidgethub/gidgethub
An async GitHub API library for Python
Python★ 416Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
—
49At riskhealth index
ReactiveBayes/RxInfer.jl
Julia package for automated Bayesian inference on a factor graph with reactive message passing
Jupyter Notebook · Julia★ 410Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0