Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,472
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,653 recordsRanked by popularity · browse by tag · record statistics
Packagist
37At riskhealth index
php-fig/container
No repository description published.
PHP★ 10K↓ 18.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
28Criticalhealth index
lukeed/clsx
A tiny (239B) utility for constructing `className` strings conditionally.
JavaScript★ 9,817↓ 442M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
36At riskhealth index
gorse-io/gorse
AI powered open source recommender system engine supports classical/LLM rankers and multimodal content via embedding
Go · Assembly★ 9,761Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
44At riskhealth index
pymc-devs/pymc
Bayesian Modeling and Probabilistic Programming in Python
Python★ 9,679Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
36At riskhealth index
terser/terser
🗜 JavaScript parser, mangler and compressor toolkit for ES6+
JavaScript★ 9,310↓ 281M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
terkelg/prompts
❯ Lightweight, beautiful and user-friendly interactive prompts
JavaScript★ 9,307↓ 206M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
36At riskhealth index
yagop/node-telegram-bot-api
Telegram Bot API for NodeJS
TypeScript★ 9,188↓ 907.5K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
39At riskhealth index
node-fetch/node-fetch
A light-weight module that brings the Fetch API to Node.js
JavaScript★ 8,857↓ 656M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI · npm
38At riskhealth index
LearningCircuit/local-deep-research
~95% on SimpleQA (e.g. Qwen3.6-27B on a 3090). Supports all local and cloud LLMs (llama.cpp, Ollama, Google, ...). 10+ search engines - arXiv, PubMed, your private documents. Everything Local & Encrypted.
Python · JavaScript★ 8,752↓ 10.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
37At riskhealth index
Shopify/react-native-skia
High-performance React Native Graphics using Skia
TypeScript · C++★ 8,457Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
fengyuanchen/viewerjs
JavaScript image viewer.
JavaScript★ 8,229↓ 503.5K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
php-fig/simple-cache
No repository description published.
PHP★ 8,079↓ 15.5M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
37At riskhealth index
SixLabors/ImageSharp
:camera: A modern, cross-platform, 2D Graphics library for .NET
C#★ 8,012Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
enquirer/enquirer
Stylish, intuitive and user-friendly prompts. Used by eslint, webpack, yarn, pm2, pnpm, RedwoodJS, FactorJS, salesforce, Cypress, Google Lighthouse, Generate, tencent cloudbase, lint-staged, gluegun, hygen, hardhat, AWS Amplify, GitHub Actions Toolkit, @airbnb/nimbus, and more! Please follow Enquirer's author: https://github.com/jonschlinkert
JavaScript · SCSS★ 7,949↓ 129M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
PyMySQL/PyMySQL
MySQL client library for Python
Python★ 7,844Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
Laravel-Lang/lang
List of 128 languages for Laravel Framework, Laravel Jetstream, Laravel Fortify, Laravel Breeze, Laravel Cashier, Laravel Nova and Laravel UI.
PHP★ 7,777↓ 400K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
predis/predis
A flexible and feature-complete Redis/Valkey client for PHP.
PHP★ 7,774↓ 6.8M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
35At riskhealth index
webmozarts/assert
Assertions to validate method input/output with nice error messages.
PHP★ 7,651↓ 12.3M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
37At riskhealth index
evrone/go-clean-template
Clean Architecture template for Golang services
Go★ 7,636Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
30At riskhealth index
ninenines/cowboy
Small, fast, modern HTTP server for Erlang/OTP.
Erlang★ 7,521Jul 20, 2026
ISCJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
phar-io/version
Library for handling version information and constraints
PHP★ 7,477↓ 14.4M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
gorakhargosh/watchdog
Python library and shell utilities to monitor filesystem events.
Python · C++★ 7,383Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
37At riskhealth index
unjs/consola
🐨 Elegant Console Logger for Node.js and Browser
TypeScript★ 7,303↓ 215M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
imgly/background-removal-js
Remove backgrounds from images directly in the browser environment with ease and no additional costs or privacy concerns. Explore an interactive demo.
TypeScript · JavaScript★ 7,233↓ 640.3K/moJul 21, 2026
AGPL-3.0Jul 21, 2026 · metrics 1.13.0
PyPI
32At riskhealth index
mher/flower
Real-time monitor and web admin for Celery distributed task queue
Python · HTML★ 7,221↓ 12.9M/moJul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
32At riskhealth index
json5/json5
JSON5 — JSON for Humans
JavaScript★ 7,146↓ 811M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm · PyPI
34At riskhealth index
jquery/esprima
ECMAScript parsing infrastructure for multipurpose analysis
TypeScript · JavaScript★ 7,140↓ 430M/moJul 22, 2026
BSD-2-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
22Criticalhealth index
php-fig/http-message
The purpose of this PSR is to provide a set of common interfaces for HTTP messages as described in RFC 7230 and RFC 7231
PHP★ 7,047↓ 19.2M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
hamcrest/hamcrest-php
PHP Hamcrest implementation [Official]
PHP★ 7,004↓ 10.2M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0