Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,670
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,239 recordsRanked by popularity · browse by tag · record statistics
crates.io
32At riskhealth index
ydb-platform/ydb-rs-sdk
No repository description published.
Rust★ 71↓ 39K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
codeigniter4/devkit
Development toolkit for CodeIgniter libraries and projects
PHP · Ruby★ 70↓ 5,581/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
miladrahimi/php-jwt
A PHP implementation of JWT (JSON Web Token) generator, parser, verifier, and validator.
PHP★ 70↓ 4,343/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist · npm
30At riskhealth index
tobyzerner/json-api-server
A JSON:API server implementation in PHP.
PHP★ 70↓ 12.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/yii-console
Yii console components
PHP★ 70↓ 17.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
19Criticalhealth index
bizley/yii2-jwt
JWT Integration for Yii 2
PHP★ 69↓ 17.3K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
36At riskhealth index
diplodoc-platform/transform
Simple transformer YFM (Yandex Flavored Markdown) to HTML.
TypeScript★ 69↓ 43K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
7Criticalhealth index
kmike/text-unidecode
The most basic Text::Unidecode port (licensed under Artistic License or GPL or GPLv2+ - choose whatever you want)
Python★ 69Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
11Criticalhealth index
caiiiycuk/emulators
emulator protocol and backends
C · JavaScript · C++★ 68Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 1.13.0
NuGet
8Criticalhealth index
hflabs/dadata-csharp
Data cleansing, enrichment and suggestions via Dadata API
C#★ 68Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
24Criticalhealth index
ScotterC/pinecone
Ruby client for Pinecone Vector DB
Ruby★ 67Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Maven
32At riskhealth index
1c-syntax/mdclasses
Разбор метаданных конфигураций, расширений и т.д. 1С:Предприятие
Java · 1C Enterprise★ 66Jul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 1.13.0
npm
22Criticalhealth index
bnurbekov/company-email-validator
Checks whether an email is a company email (useful for B2B forms)
JavaScript★ 66↓ 421.2K/moJul 23, 2026
UnlicenseJul 23, 2026 · metrics 1.13.0
npm
36At riskhealth index
curvefi/curve-js
No repository description published.
TypeScript★ 66↓ 18.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
roadrunner-php/grpc
:electric_plug: RoadRunner GRPC SDK
PHP★ 66↓ 151.2K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
41At riskhealth index
jshttp/vary
Manipulate the HTTP Vary header
JavaScript★ 65↓ 389M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
39At riskhealth index
pyupio/dparse
A parser for Python dependency files
Python★ 64↓ 4.5M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
spiral/roadrunner-bridge
🌉 RoadRunner bridge to Spiral Framework
PHP★ 64↓ 119.7K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
AdguardTeam/FiltersCompiler
A tool that compiles & validates filters
JavaScript★ 63↓ 135/moJul 20, 2026
LGPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/router
Router is a request matcher and URL generator
PHP★ 62↓ 17.1K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Go
33At riskhealth index
GoPolymarket/polymarket-go-sdk
Core Polymarket infrastructure repository maintained under governance.
Go★ 61Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
31At riskhealth index
launchdarkly/ruby-eventsource
Server-Sent Events client for Ruby
Ruby★ 61Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
mgeier/sphinx-last-updated-by-git
:watch: Get the "last updated" time for each Sphinx page from Git
Python★ 60↓ 503.5K/moJul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
—
22Criticalhealth index
processone/iconv
Fast encoding conversion library for Erlang / Elixir
Shell · Erlang★ 60Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
web-platform-dx/baseline-browser-mapping
baseline-browser-mapping exposes arrays of browsers compatible with Baseline Widely Available and specified Baseline year feature sets.
JavaScript · TypeScript★ 59↓ 556M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
NuGet
12Criticalhealth index
VahidFarahmandian/Jinget
Jinget is a high-performance .NET 8.0 framework built with DDD + CQRS at its core. It's your Swiss Army knife for cutting through boilerplate code and supercharging productivity.
C#★ 58Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
26Criticalhealth index
grammyjs/storages
Storage adapters for grammY sessions.
TypeScript★ 58Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-stratigility
PSR-7 middleware foundation for building and dispatching middleware pipelines
PHP★ 58↓ 215.4K/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0