Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,690
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,251 recordsRanked by popularity · browse by tag · record statistics
npm
32At riskhealth index
marcalexiei/eslint-zod
ESLint plugin that adds custom linting rules to enforce best practices when using Zod
TypeScript★ 74Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/rbac
Role based access control
PHP★ 74↓ 10.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
codeigniter4/queue
Queues for the CodeIgniter 4 framework
PHP★ 73↓ 14.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
duncan3dc/fork-helper
A PHP helper to fork processes and allow multi-threading
PHP★ 73↓ 7,907/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
elevenlabs/cli
Command Line Interface to interact with ElevenLabs voice agents
TypeScript★ 73↓ 18.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
16Criticalhealth index
Swyftx/crypto-address-validator
Useful library for validation of Bitcoin, Litecoin, Ethereum and other cryptocoin addresses
JavaScript★ 72↓ 18.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
31At riskhealth index
annetutil/gnetcli
The ultimate solution for CLI automation in Golang
Go★ 71Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
awcodes/shout
A simple inline contextual notice for Filament forms and infolist, basically just a fancy placeholder.
PHP · Blade★ 71↓ 35K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
crates.io
32At riskhealth index
ydb-platform/ydb-rs-sdk
No repository description published.
Rust★ 71↓ 39K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
codeigniter4/devkit
Development toolkit for CodeIgniter libraries and projects
PHP · Ruby★ 70↓ 5,581/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
miladrahimi/php-jwt
A PHP implementation of JWT (JSON Web Token) generator, parser, verifier, and validator.
PHP★ 70↓ 4,343/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist · npm
30At riskhealth index
tobyzerner/json-api-server
A JSON:API server implementation in PHP.
PHP★ 70↓ 12.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/yii-console
Yii console components
PHP★ 70↓ 17.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
19Criticalhealth index
bizley/yii2-jwt
JWT Integration for Yii 2
PHP★ 69↓ 17.3K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
36At riskhealth index
diplodoc-platform/transform
Simple transformer YFM (Yandex Flavored Markdown) to HTML.
TypeScript★ 69↓ 43K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
7Criticalhealth index
kmike/text-unidecode
The most basic Text::Unidecode port (licensed under Artistic License or GPL or GPLv2+ - choose whatever you want)
Python★ 69Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
11Criticalhealth index
caiiiycuk/emulators
emulator protocol and backends
C · JavaScript · C++★ 68Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 1.13.0
NuGet
8Criticalhealth index
hflabs/dadata-csharp
Data cleansing, enrichment and suggestions via Dadata API
C#★ 68Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
24Criticalhealth index
ScotterC/pinecone
Ruby client for Pinecone Vector DB
Ruby★ 67Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Maven
32At riskhealth index
1c-syntax/mdclasses
Разбор метаданных конфигураций, расширений и т.д. 1С:Предприятие
Java · 1C Enterprise★ 66Jul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 1.13.0
npm
22Criticalhealth index
bnurbekov/company-email-validator
Checks whether an email is a company email (useful for B2B forms)
JavaScript★ 66↓ 421.2K/moJul 23, 2026
UnlicenseJul 23, 2026 · metrics 1.13.0
npm
36At riskhealth index
curvefi/curve-js
No repository description published.
TypeScript★ 66↓ 18.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
roadrunner-php/grpc
:electric_plug: RoadRunner GRPC SDK
PHP★ 66↓ 151.2K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
41At riskhealth index
jshttp/vary
Manipulate the HTTP Vary header
JavaScript★ 65↓ 389M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
39At riskhealth index
pyupio/dparse
A parser for Python dependency files
Python★ 64↓ 4.5M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
spiral/roadrunner-bridge
🌉 RoadRunner bridge to Spiral Framework
PHP★ 64↓ 119.7K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
AdguardTeam/FiltersCompiler
A tool that compiles & validates filters
JavaScript★ 63↓ 135/moJul 20, 2026
LGPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/router
Router is a request matcher and URL generator
PHP★ 62↓ 17.1K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0