Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,670
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,283 recordsRanked by popularity · browse by tag · record statistics
Packagist
30At riskhealth index
yiisoft/i18n
Yii i18n
PHP★ 27↓ 31.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
crates.io
26Criticalhealth index
cavivie/netstack-smoltcp
A netstack based on smoltcp-rs.
Rust · Shell★ 26↓ 27.4K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
8Criticalhealth index
foxcpp/go-imap-sql
SQL-based storage backend for go-imap v2
Go★ 26Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
17Criticalhealth index
grafana-cold-storage/xk6-amqp
A k6 extension for publishing and consuming messages from queues and exchanges using AMQP 0.9.1.
Go★ 26Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
30At riskhealth index
gravity-ui/table
No repository description published.
TypeScript★ 26↓ 31.7K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
33At riskhealth index
taiga-family/toolkit
ESlint, Stylelint, Prettier and more tools
TypeScript★ 26Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/translator
Message translation
PHP★ 26↓ 30.2K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
31At riskhealth index
gravity-ui/websql-autocomplete
A tool that provides autocompletion for various sql dialects
TypeScript★ 25↓ 11.6K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
voku/urlify
🔗 URLify - Convert any string into a valid and readable string for usage in the URL.
PHP★ 25↓ 50.3K/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/widget
Widgets are reusable building blocks used to create complex and configurable user interface elements in an object-oriented fashion
PHP★ 25↓ 11.5K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
—
28Criticalhealth index
EnkiMultimedia/erlang-rocksdb
Erlang wrapper for RocksDB.
C++ · Erlang★ 24Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
18Criticalhealth index
dspinhirne/netaddr-rb
A Ruby library for performing calculations on IPv4 and IPv6 subnets.
Ruby★ 24Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
jackchuka/dutix
Set default apps, migrate file associations, and manage handlers on macOS
Go★ 24Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/aliases
Named paths and URLs storage
PHP★ 24↓ 36.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/rbac-php
RBAC PHP file storage.
PHP★ 24↓ 3,350/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
1inch/cross-chain-sdk
No repository description published.
TypeScript★ 23↓ 60.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist · npm
33At riskhealth index
MrAdder/filament-logger
Audit logging, exports, alerts, and dashboards for Filament admin panels.
PHP★ 23↓ 6,315/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Packagist
27Criticalhealth index
TheDragonCode/support
Support package is a collection of helpers and tools for projects.
PHP★ 23↓ 511.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
NeuraLegion/bright-cli
Command Line Interface (CLI) tool for BrightSec's solutions.
TypeScript★ 22↓ 3,745/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
NuGet
10Criticalhealth index
Taritsyn/DartSassHost
.NET wrapper around the Dart Sass.
JavaScript · C#★ 22Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
48At riskhealth index
adaptyteam/funnelfox-billing-js
No repository description published.
TypeScript · HTML★ 22↓ 4,378/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
8Criticalhealth index
cloud-ru-tech/snack-uikit
No repository description published.
TypeScript · SCSS · CSS★ 22Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm · Packagist
20Criticalhealth index
javiereguiluz/EasyAdminBundle
The new (and simple) admin generator for Symfony applications.
PHP · Twig★ 22Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
jsdom/html-encoding-sniffer
Sniff the encoding from a HTML byte stream
JavaScript★ 22↓ 314M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
33At riskhealth index
laminas/laminas-mvc-middleware
Dispatch middleware pipelines in place of controllers in laminas-mvc.
PHP★ 22↓ 23K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
16Criticalhealth index
mat813/rb-kqueue
An FFI wrapper for kqueue
Ruby★ 22Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
novasamatech/subquery-history
SubQuery API for saturating Nova Wallet as a data source. Focuses on the following use cases: 1) Provide complete operation history, including Transfers, Rewards/slashes, Other extrinsics 2) Provide data for staking analytics
TypeScript · Python★ 22Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
24Criticalhealth index
pyanodon/pycoalprocessing
No repository description published.
Lua★ 22Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0