Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

↗

Reproducible evidenceEvery published result links to inspectable source evidence and methodology.

◇

Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.

≈

Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.

Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories

37,718

Monthly downloads under inspection

379B

Median health index

57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth

Clear filters

1,239 recordsRanked by popularity · browse by tag · record statistics

—

31At riskhealth index

processone/xmpp

Erlang/Elixir XMPP parsing and serialization library on top of Fast XML

Erlang★ 150Jul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

npm

23Criticalhealth index

shaddix/react-query-swagger

Generates react-query hooks based on Swagger API definitions

Liquid · JavaScript★ 148↓ 18K/moJul 19, 2026

MITJul 19, 2026 · metrics 1.13.0

PyPI

18Criticalhealth index

nalgeon/sqlean.py

Python's sqlite3 + extensions

C · Python★ 146Jul 21, 2026

ZlibJul 21, 2026 · metrics 1.13.0

Maven

31At riskhealth index

pgcodekeeper/pgcodekeeper

Eclipse plugin for database schema management

Java★ 146Jul 21, 2026

Apache-2.0Jul 21, 2026 · metrics 1.13.0

PyPI

12Criticalhealth index

antigenomics/vdjtools

Analysis of immune repertoire sequencing results

Python★ 144↓ 5,532/moJul 20, 2026

GPL-3.0Jul 20, 2026 · metrics 1.13.0

npm

26Criticalhealth index

felixge/node-combined-stream

A stream that emits multiple other streams one after another.

JavaScript★ 144↓ 463M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

—

9Criticalhealth index

VahidN/DNTCommon.Web.Core

DNTCommon.Web.Core provides common scenarios' solutions for ASP.NET Core applications.

C#★ 142Jul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

PyPI

38At riskhealth index

pymc-devs/pymc-extras

Powerful add-ons for PyMC

Jupyter Notebook★ 142↓ 211.1K/moJul 20, 2026

Custom licenseJul 20, 2026 · metrics 1.13.0

—

9Criticalhealth index

Taritsyn/BundleTransformer

Bundle Transformer - a modular extension for System.Web.Optimization (also known as the Microsoft ASP.NET Web Optimization Framework).

JavaScript · C#★ 141Jul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

PyPI

31At riskhealth index

madpah/requirements-parser

A Pip requirements file parser.

Python★ 141↓ 15.2M/moJul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

npm

13Criticalhealth index

VKCOM/icons

Набор SVG иконок, представленный в виде React компонентов.

JavaScript · TypeScript★ 140Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

npm

42At riskhealth index

jshttp/proxy-addr

Determine address of proxied request

JavaScript★ 140↓ 356M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

Packagist

40At riskhealth index

grasmash/expander

This tool expands property references in PHP arrays.

PHP★ 138↓ 1.2M/moJul 22, 2026

MITJul 22, 2026 · metrics 1.13.0

npm

44At riskhealth index

radarlabs/s2

Node.js JavaScript / TypeScript bindings for Google S2

C++ · JavaScript★ 138↓ 2,640/moJul 23, 2026

Apache-2.0Jul 23, 2026 · metrics 1.13.0

RubyGems

49At riskhealth index

metanorma/metanorma

The Metanorma project: www.metanorma.org

Ruby · XSLT★ 137Jul 20, 2026

BSD-2-ClauseJul 20, 2026 · metrics 1.13.0

RubyGems

34At riskhealth index

rubygems/gems

Ruby wrapper for the RubyGems.org API

Ruby★ 137Jul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

Packagist · npm

24Criticalhealth index

pktharindu/nova-permissions

Add Permissions based authorization for your Nova installation via User-based Roles and Permissions. Roles are defined in the database whereas Permissions are defined in the code base.

PHP · Vue★ 136↓ 12.9K/moJul 20, 2026

MITJul 20, 2026 · metrics 1.13.0

—

26Criticalhealth index

processone/fast_xml

Fast Expat based Erlang XML parsing library

Erlang · C★ 136Jul 20, 2026

Apache-2.0Jul 20, 2026 · metrics 1.13.0

crates.io · npm

24Criticalhealth index

Zheoni/cooklang-chef

A CLI to manage cooklang recipes