Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
35,688
Monthly downloads under inspection
378B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,172 recordsRanked by popularity · browse by tag · record statistics
PyPI
40At riskhealth index
scrapinghub/dateparser
python parser for human readable dates
Python★ 2,843↓ 45.6M/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
deedy5/ddgs
A metasearch library that aggregates results from diverse web search services
Python★ 2,825Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
12Criticalhealth index
mrmlnc/fast-glob
:rocket: It's a very fast and efficient glob library for Node.js
JavaScript · TypeScript★ 2,818↓ 593M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
tkem/cachetools
Extensible memoizing collections and decorators
Python★ 2,768↓ 322M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
29Criticalhealth index
salarcode/SmartProxy
Firefox/Chrome browser extension. SmartProxy will automatically enable/disable proxy for the sites you visit, based on customizable patterns.
TypeScript · CSS · HTML★ 2,710Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
bjarneo/cliamp
cliamp - Terminal music player inspired by winamp
Go★ 2,708Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
schmittjoh/php-option
Option Type for PHP
PHP★ 2,675↓ 12.4M/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
—
32At riskhealth index
samber/cc-skills-golang
🧑‍🎨 A collection of Golang agentic skills that works
Go · Makefile★ 2,670Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
ealush/vest
Vest ✅ Declarative validations framework
TypeScript★ 2,664Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
33At riskhealth index
divkit/divkit
DivKit is an open source Server-Driven UI (SDUI) framework. SDUI is a an emerging technique that leverage the server to build the user interfaces of their mobile app
Kotlin · Swift★ 2,646Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
42At riskhealth index
php-http/httplug
HTTPlug, the HTTP client abstraction for PHP
PHP★ 2,595↓ 6.3M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · PyPI
40At riskhealth index
OpenLineage/OpenLineage
An Open Standard for lineage metadata collection
Java · Python★ 2,552Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
hmgle/graftcp
A flexible tool for redirecting a program's TCP, UDP, and DNS traffic to SOCKS5 or HTTP proxies.
C · Go★ 2,549Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
nelmio/alice
Expressive fixtures generator
PHP★ 2,540↓ 572K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
35At riskhealth index
TypeScriptToLua/TypeScriptToLua
Typescript to lua transpiler. https://typescripttolua.github.io/
TypeScript★ 2,527↓ 48.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
25Criticalhealth index
dmlc/decord
An efficient video loader for deep learning with smart shuffling that's super easy to digest
C++ · Python★ 2,507↓ 2.4M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
dipu-bd/lightnovel-crawler
Generate and download e-books from online sources.
Python★ 2,494Jul 18, 2026
GPL-3.0Jul 18, 2026 · metrics 1.13.0
PyPI
20Criticalhealth index
wiseman/py-webrtcvad
Python interface to the WebRTC Voice Activity Detector
C · C++★ 2,492↓ 451.3K/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
Packagist
49At riskhealth index
nunomaduro/termwind
🍃 In short, it's like Tailwind CSS, but for the PHP command-line applications.
PHP★ 2,489↓ 10.9M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Hex
44At riskhealth index
lfe/lfe
Lisp Flavoured Erlang (LFE)
Erlang · LFE★ 2,441↓ 3,099/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
RubyGems
28Criticalhealth index
premailer/premailer
Preflight for HTML email
Ruby★ 2,415Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Go
41At riskhealth index
Kong/kubernetes-ingress-controller
:gorilla: Kong for Kubernetes: The official Ingress Controller for Kubernetes.
Go★ 2,404Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
indexmap-rs/indexmap
A hash table with consistent order and fast iteration; access items by key or sequence index
Rust★ 2,399↓ 99.7M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
JayBizzle/Crawler-Detect
🕷 CrawlerDetect is a PHP class for detecting bots/crawlers/spiders via the user agent
PHP★ 2,374↓ 2.3M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
viest/php-ext-xlswriter
🚀 PHP Extension for creating and reader XLSX files.
C★ 2,374↓ 65/moJul 22, 2026
BSD-2-ClauseJul 22, 2026 · metrics 1.13.0
npm · crates.io
33At riskhealth index
IrosTheBeggar/mStream
The easiest music streaming server available
JavaScript★ 2,357↓ 387/moJul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
Hex
30At riskhealth index
edgurgel/httpoison
Yet Another HTTP client for Elixir powered by hackney
Elixir★ 2,297↓ 602K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
38At riskhealth index
gotd/td
Telegram client, in Go. (MTProto API)
Go★ 2,288Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0