Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,690
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,251 recordsRanked by popularity · browse by tag · record statistics
Go
33At riskhealth index
GoPolymarket/polymarket-go-sdk
Core Polymarket infrastructure repository maintained under governance.
Go★ 61Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
31At riskhealth index
launchdarkly/ruby-eventsource
Server-Sent Events client for Ruby
Ruby★ 61Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
mgeier/sphinx-last-updated-by-git
:watch: Get the "last updated" time for each Sphinx page from Git
Python★ 60↓ 503.5K/moJul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
—
22Criticalhealth index
processone/iconv
Fast encoding conversion library for Erlang / Elixir
Shell · Erlang★ 60Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
web-platform-dx/baseline-browser-mapping
baseline-browser-mapping exposes arrays of browsers compatible with Baseline Widely Available and specified Baseline year feature sets.
JavaScript · TypeScript★ 59↓ 556M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
NuGet
12Criticalhealth index
VahidFarahmandian/Jinget
Jinget is a high-performance .NET 8.0 framework built with DDD + CQRS at its core. It's your Swiss Army knife for cutting through boilerplate code and supercharging productivity.
C#★ 58Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
26Criticalhealth index
grammyjs/storages
Storage adapters for grammY sessions.
TypeScript★ 58Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-stratigility
PSR-7 middleware foundation for building and dispatching middleware pipelines
PHP★ 58↓ 215.4K/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
yiisoft/html
Handy library to generate HTML
PHP★ 58↓ 28.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
Intervention/zodiac
PHP Zodiac Sign Calculator
PHP★ 57↓ 4,372/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
30At riskhealth index
OHDSI/DatabaseConnector
An R package for connecting to databases using JDBC.
R★ 57Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
NuGet
27Criticalhealth index
danielklecha/SharpIppNext
A .NET Standard library for building Internet Printing Protocol (IPP) clients and servers.
C#★ 57Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
36At riskhealth index
gemini-testing/html-reporter
Html reporter for Testplane (ex-hermione)
TypeScript · JavaScript★ 57↓ 34.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
42At riskhealth index
sfackler/foreign-types
No repository description published.
Rust★ 57↓ 55.3M/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Hex
28Criticalhealth index
code-supply/deps_nix
Mix task that converts Mix dependencies to Nix derivations
Elixir · Nix★ 56↓ 8,275/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
18Criticalhealth index
vans163/rebar3_auto
Rebar3 plugin to auto compile and reload on file change.
Erlang★ 56Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/arrays
Yii Array Helper
PHP★ 56↓ 78.4K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/view
Yii view rendering library
PHP★ 56↓ 16.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
NuGet
31At riskhealth index
JKorf/CoinEx.Net
A C# .netstandard client library for the CoinEx REST and Websocket Spot API focusing on clear usage and models
C#★ 55Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
—
24Criticalhealth index
lrascao/rebar3_gpb_plugin
A rebar3 plugin for automatically compiling .proto files using the gpb protobuf compiler
Erlang★ 55Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
nbgrp/onelogin-saml-bundle
OneLogin SAML Symfony Bundle
PHP★ 55↓ 57.7K/moJul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
madewithlove/license-checker-php
CLI tool to verify used licenses in composer dependencies
PHP★ 54↓ 13.9K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
34At riskhealth index
reportportal/agent-js-playwright
Agent to integrate Playwright with ReportPortal.
TypeScript★ 54↓ 946K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-autoloader
[READ ONLY] Autoloader for Jetpack. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 53↓ 201K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
46At riskhealth index
keepsuit/laravel-temporal
Laravel integration with temporal.io workflow engine
PHP★ 53↓ 15.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
PUGX/shortid-php
An implementation of ShortId in PHP
PHP★ 51↓ 10.2K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
alexmojaki/pure_eval
Safely evaluate AST nodes without side effects
Python★ 51↓ 119M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
alexmojaki/stack_data
No repository description published.
Python★ 51Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
46At riskhealth index
asottile/flake8-typing-imports
flake8 plugin which checks that typing imports are properly guarded
Python★ 51↓ 101.4K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
coreydoughty/Fpdf
A composer wrapper around the great php FPDF class. All credit to them.
PHP · HTML★ 51↓ 107K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0