Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,949
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,712 recordsRanked by popularity · browse by tag · record statistics
npm
11Criticalhealth index
defunctzombie/node-stackback
return array of v8 CallSite objects for a stacktrace
JavaScript★ 14Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
35At riskhealth index
diplodoc-platform/components
No repository description published.
TypeScript · SCSS★ 14↓ 3,270/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
22Criticalhealth index
flipperdevices/stm32wb_copro
No repository description published.
C++ · C★ 14Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
npm
36At riskhealth index
gravity-ui/nodekit
Simple toolkit for Node.js applications and scripts
TypeScript★ 14↓ 36.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
32At riskhealth index
guzzle/test-server
A node.js server and a PHP controller class one can use when testing
JavaScript · PHP★ 14↓ 49.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
mcollina/aedes-persistence
In-memory implementation of an Aedes persistence, with abstract tests
JavaScript★ 14Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
30At riskhealth index
nanoframework/System.Net
📦 .NET nanoFramework System.Net Class Library
C#★ 14Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
tiagosiebler/kucoin-api
Node.js & JavaScript SDK for Kucoin REST APIs & WebSockets, with TypeScript & browser support.
TypeScript★ 14↓ 8,160/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
crates.io
28Criticalhealth index
tyranron/metrics-prometheus-rs
`prometheus` backend for `metrics` crate
Rust★ 14↓ 45.4K/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Go
24Criticalhealth index
xssnick/tonutils-storage-provider
Alternative TON Storage Provider implementation compatible with tonutils-storage
Go★ 14Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
PHP★ 14↓ 9,483/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
yiisoft/translator-message-php
Yii i18n PHP message storage
PHP★ 14↓ 16.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
Toflar/state-set-index
Implementation of the State Set Index Algorithm in PHP
PHP★ 13↓ 24K/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Hex
27Criticalhealth index
edgurgel/ham
Library to validate function arguments and return values against their typespecs. Extracted out from Hammox
Elixir★ 13↓ 120.9K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
24Criticalhealth index
hossein1376/kamune
Communication over untrusted networks
Go · Svelte★ 13Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
29Criticalhealth index
initCommerce/gato
A dart utility library inspired by javascript lodash library.
Dart★ 13Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
—
18Criticalhealth index
nikitalita/gdsdecomp
Godot reverse engineering tools
C++★ 13Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
24Criticalhealth index
pyanodon/pypetroleumhandling
No repository description published.
Lua★ 13Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
samn/json-stable-stringify
deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results
JavaScript★ 13↓ 508M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/cache-file
Yii Cache Library - File Handler
PHP★ 13↓ 7,843/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/mailer-symfony
Yii Framework Symfony Mailer Integration
PHP★ 13↓ 3,097/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
astronomer/astro-airflow-mcp
MCP server for Apache Airflow instances. Runs standalone or as an Airflow plugin.
Python★ 12Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Go
28Criticalhealth index
goreflect/go_structor
Go configurator structures library
Go★ 12Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
29Criticalhealth index
goreflect/gostructor
Go configurator structures library
Go★ 12Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
26Criticalhealth index
kamune-org/kamune
Communication over untrusted networks
Go · Svelte★ 12Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Go
24Criticalhealth index
kamune/kamune
Communication over untrusted networks
Go · Svelte★ 12Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Packagist
42At riskhealth index
marineusde/larapex-charts
A Laravel wrapper for apex charts
PHP★ 12↓ 3,491/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0