Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,108
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,728 recordsRanked by popularity · browse by tag · record statistics
Packagist
31At riskhealth index
Intervention/validation
Missing Laravel Validation Rules
PHP★ 678↓ 153.2K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go · npm
34At riskhealth index
umputun/revdiff
TUI for reviewing diffs, files, and documents with inline annotations
Go★ 678↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
—
9Criticalhealth index
VahidN/iTextSharp.LGPLv2.Core
iTextSharp.LGPLv2.Core is an unofficial port of the last LGPL version of the iTextSharp (V4.1.6) to .NET Core
C#★ 676Jul 15, 2026
Custom licenseJul 15, 2026 · metrics 1.13.0
npm
15Criticalhealth index
dominictarr/through
simple way to create a ReadableWritable stream that works
JavaScript★ 671↓ 190M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
36At riskhealth index
una-ui/una-ui
The Atomic UI framework for Nuxt, powered by Unocss engine 💛
Vue · TypeScript★ 671↓ 7,912/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
27Criticalhealth index
acornjs/acorn-jsx
Alternative, faster React.js JSX parser
JavaScript★ 669↓ 509M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go · npm
31At riskhealth index
syncyomi/syncyomi
SyncYomi is an open-source project crafted to provide a seamless synchronization experience for your TachiyomiSY/Mihon (Mihon client is not implemented but it works the same probably will never be implemented)/manga reading progress and library across multiple devices.
Go · Vue★ 667Jul 21, 2026
GPL-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
bybit-exchange/pybit
Official Python3 API connector for Bybit's HTTP and WebSockets APIs.
Python★ 663Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
imengyu/vue3-context-menu
A very simple context menu component for Vue3 一个简洁美观简单的Vue3右键菜单组件
Vue · TypeScript · SCSS★ 661↓ 40.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
44At riskhealth index
minimistjs/minimist
parse argument options
JavaScript★ 661↓ 543M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
suguru03/neo-async
Neo-Async is thought to be used as a drop-in replacement for Async, it almost fully covers its functionality and runs faster
JavaScript★ 653Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Hex
44At riskhealth index
erlcloud/erlcloud
AWS APIs library for Erlang (Amazon EC2, S3, SQS, DDB, ELB and etc)
Erlang★ 651↓ 11.3K/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
greenlion/PHP-SQL-Parser
A pure PHP SQL (non validating) parser w/ focus on MySQL dialect of SQL
PHP★ 642↓ 246.2K/moJul 25, 2026
BSD-3-ClauseJul 25, 2026 · metrics 1.13.0
npm
40At riskhealth index
sindresorhus/find-up
Find a file or directory by walking up parent directories
JavaScript · TypeScript★ 642↓ 1.2B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI · crates.io
30At riskhealth index
indygreg/python-zstandard
Python bindings to the Zstandard (zstd) compression library
C · Python★ 638Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
RubyGems
55Moderatehealth index
puppetlabs/facter
Collect and display system facts
Ruby★ 635Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
thombashi/pytablewriter
pytablewriter is a Python library to write a table in various formats: AsciiDoc / CSV / Elasticsearch / HTML / JavaScript / JSON / LaTeX / LDJSON / LTSV / Markdown / MediaWiki / NumPy / Excel / Pandas / Python / reStructuredText / SQLite / TOML / TSV.
Python★ 630Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
49At riskhealth index
anywherelan/awl
Securely connect your devices into a private network. Mesh VPN, socks5 proxy server/client
Go★ 626Jul 24, 2026
MPL-2.0Jul 24, 2026 · metrics 1.13.0
Go
30At riskhealth index
Leadaxe/singbox-launcher
GUI launcher for sing-box. Written in Go.
Go★ 625Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
29Criticalhealth index
l3tnun/EPGStation
Mirakurun を使用した録画管理ソフト
TypeScript · Vue★ 624Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
LiteSVM/litesvm
No repository description published.
Rust★ 623Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist · npm
32At riskhealth index
thedevdojo/auth
This is the repo for the DevDojo Auth package
Blade · PHP★ 623↓ 45.3K/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
shipmonk-rnd/composer-dependency-analyser
🚀 Fast detection of composer dependency issues (unused dependencies, shadow dependencies, misplaced dependencies)
PHP★ 622↓ 590.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
browserslist/caniuse-lite
A smaller version of caniuse-db, with only the essentials!
JavaScript★ 613↓ 722M/moJul 19, 2026
CC-BY-4.0Jul 19, 2026 · metrics 1.13.0
npm
33At riskhealth index
beaugunderson/ip-address
💻 a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
TypeScript★ 612↓ 368M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
hiddentao/fast-levenshtein
Efficient Javascript implementation of Levenshtein algorithm with locale-specific collator support.
JavaScript★ 612↓ 519M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
dukeluo/eslint-plugin-check-file
ESLint rules for consistent filename and folder. Allows you to enforce a consistent naming pattern for the filename and folder.
JavaScript★ 608↓ 4.3M/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
danthedeckie/simpleeval
Simple Safe Sandboxed Extensible Expression Evaluator for Python
Python★ 607Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0