Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,658
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,239 recordsRanked by popularity · browse by tag · record statistics
Packagist
29Criticalhealth index
yiisoft/yii2-bootstrap
Yii 2 Bootstrap 3 Extension
PHP★ 183↓ 212.2K/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
PyPI
18Criticalhealth index
core-api/python-client
Python client library for Core API.
Python★ 182↓ 1.5M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
33At riskhealth index
kurkle/chartjs-chart-sankey
Chart.js module for creating sankey diagrams
TypeScript · JavaScript★ 182↓ 176.5K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
37At riskhealth index
ydb-platform/ydb-go-sdk
Pure Go native and database/sql driver for YDB
Go★ 182Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
40At riskhealth index
jshttp/methods
HTTP verbs that node supports
JavaScript★ 181↓ 239M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
30At riskhealth index
FTBTeam/FTB-Quests
Quests is one of the best Questing mods for Minecraft out there. It has a highly customisable questing system and an easy to use interface.
Java★ 174Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
Maven
34At riskhealth index
eclipse-vertx/vertx-auth
Authentication and authorization providers for Eclipse Vert.x
Java★ 174Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
laminas/laminas-mvc
Laminas's event-driven MVC layer, including MVC Applications, Controllers, and Plugins
PHP★ 173↓ 460.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
30At riskhealth index
Luligu/matterbridge-zigbee2mqtt
Matterbridge zigbee2mqtt plugin
TypeScript · JavaScript★ 169↓ 8,820/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
NuGet
18Criticalhealth index
Krusen/BencodeNET
.NET library for encoding/decoding bencode and reading/writing torrent files
C#★ 167Jul 20, 2026
UnlicenseJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
yiisoft/validator
Yii validator library
PHP★ 167↓ 18.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
—
9Criticalhealth index
Octonica/ClickHouseClient
ClickHouse .NET Core driver
C#★ 166Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
—
26Criticalhealth index
danipen/TextMateSharp
A port of tm4e to bring TextMate grammars to dotnet ecosystem
C#★ 166Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm · PyPI
36At riskhealth index
Aurorastation/Aurora.3
The code for Aurorastation's new base, forked from Baystation12.
DM★ 161Jul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
Laravel-Lang/common
Easily connect the necessary language packs to the application
PHP★ 160↓ 258.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
38At riskhealth index
laminas/laminas-validator
Validation classes for a wide range of domains, and the ability to chain validators to create complex validation criteria
PHP★ 160↓ 1.2M/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
VictoriaMetrics/ansible-playbooks
Ansible Playbooks for Victoria Metrics monorepo
Jinja · Makefile · Shell★ 159Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
—
20Criticalhealth index
serilog/serilog-extensions-logging-file
Add file logging to ASP.NET Core apps in one line of code.
C# · PowerShell★ 158Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
dropbox/pytest-flakefinder
Runs tests multiple times to expose flakiness.
Python★ 157↓ 1.8M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
13Criticalhealth index
postgrespro/testgres
Testing framework for PostgreSQL and its extensions
Python★ 157↓ 90.7K/moJul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
npm
33At riskhealth index
sindresorhus/merge-descriptors
Merge objects using their property descriptors
JavaScript★ 157↓ 445M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
48At riskhealth index
Kilian/electron-to-chromium
Provides a list of electron-to-chromium version mappings
JavaScript★ 156↓ 722M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Go · PyPI
34At riskhealth index
argoproj-labs/rollouts-plugin-trafficrouter-gatewayapi
The Argo Rollouts plugin implementing the Kubernetes Gateway API specification for using different traffic providers in progressive delivery scenarios
Go★ 156Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
16Criticalhealth index
clue/reactphp-block
Lightweight library that eases using components built for ReactPHP in a traditional, blocking environment.
PHP★ 156↓ 14.7K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
11Criticalhealth index
green-api/whatsapp-api-client-js
This library helps you easily create a javascript application with Whatsapp support
JavaScript★ 154Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
2ik/django-editorjs-fields
Django plugin for using Editor.js
Python · CSS★ 152Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
9Criticalhealth index
psinetron/echoes-vault-opencode
Persistent memory plugin for OpenCode. Obsidian-style knowledge base that survives across sessions
TypeScript★ 151↓ 7,788/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
TimelordUK/node-sqlserver-v8
branched from node-sqlserver, SQL server driver compatible with all versions of Node
C++ · JavaScript★ 150↓ 185.3K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
20Criticalhealth index
mafintosh/end-of-stream
Call a callback when a readable/writable/duplex stream has completed or failed.
JavaScript★ 150↓ 366M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0