Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,509
Monthly downloads under inspection
380B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,759 recordsRanked by popularity · browse by tag · record statistics
Go
25Criticalhealth index
xssnick/tonutils-storage
TON Storage golang implementation
Go★ 83Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
ehabterra/apispec
APISpec - Generate OpenAPI 3.1 specs from Go code with intelligent framework detection and call graph analysis. Supports Gin, Echo, Chi, Fiber, and net/http.
Go★ 82Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
rust-lang/jobserver-rs
No repository description published.
Rust★ 81↓ 34.3M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
22Criticalhealth index
sindresorhus/is-retry-allowed
Check whether a request can be retried based on the `error.code`
JavaScript★ 81↓ 63.7M/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go
34At riskhealth index
skycoin/skywire
Skywire Node implementation
Go★ 81Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
23Criticalhealth index
sunrise-php/vin
Simple VIN decoder for PHP 7.1+ based on ISO-3779
PHP★ 81↓ 3,990/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
NuGet
16Criticalhealth index
Chatham/Vault.NET
.NET API client for vault
C#★ 80Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
37At riskhealth index
estools/esrecurse
AST recursive visitor
JavaScript★ 80↓ 539M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm · RubyGems
36At riskhealth index
fingerprintjs/fingerprintjs-pro-react-native
Official React Native client for Fingerprint. 100% accurate device identification for fraud detection.
TypeScript · JavaScript★ 80↓ 51.7K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
crates.io
36At riskhealth index
leo91000/graphile_worker_rs
High performance Rust/PostgreSQL job queue (also suitable for getting jobs generated by PostgreSQL triggers/functions out into a different work queue)
Rust★ 80↓ 3,466/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
26Criticalhealth index
lpil/glance
👁️‍🗨️ A Gleam source code parser, in Gleam!
Gleam★ 80Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
nodelib/nodelib
Monorepo for NodeLib libraries
TypeScript · JavaScript★ 80Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
krowinski/bcmath-extended
Extends php BCMath lib for missing functions like floor, ceil, round, abs, min, max, rand for big numbers. Also wraps existing BCMath functions.
PHP★ 79↓ 31.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
20Criticalhealth index
microsoft/p-graph
Moved to https://github.com/microsoft/beachball/tree/main/packages/p-graph
TypeScript★ 79↓ 120.1K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
—
28Criticalhealth index
basho/mochiweb
a branch of Mochi Media's excellent HTTP library -- their canonical source can be found at https://github.com/mochi/mochiweb
Erlang★ 78Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
NuGet
31At riskhealth index
erri120/GameFinder
.NET library for finding games.
C#★ 78Jul 24, 2026
GPL-3.0Jul 24, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
mosquito/caio
Linux AIO c python bindings
C · Python★ 78Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
crates.io
33At riskhealth index
sfackler/streaming-iterator
No repository description published.
Rust★ 78↓ 4.3M/moJul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
npm
38At riskhealth index
sindresorhus/array-union
Create an array of unique values, in order, from the input arrays
TypeScript · JavaScript★ 78↓ 252M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
24Criticalhealth index
spinnaker/echo
Spinnaker Eventing Service
Java · Groovy★ 77Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
—
15Criticalhealth index
isaacs/inflight-DEPRECATED-DO-NOT-USE
Add callbacks to requests in flight to avoid async duplication
Mixed★ 76Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
llblab/pi-telegram
Telegram runtime adapter for Pi
TypeScript★ 76↓ 8,553/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm
39At riskhealth index
sindresorhus/node-defaults
Easily handle defaults for your options
JavaScript · TypeScript★ 76↓ 198M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
1inch/fusion-sdk
No repository description published.
TypeScript★ 75↓ 76K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
RubyGems
20Criticalhealth index
codecov/codecov-ruby
Ruby uploader for Codecov
Ruby★ 75Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
30At riskhealth index
dotzero/git-profile
↔️ Git Profile helps you manage multiple Git identities and switch between them per repository
Go★ 75Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
mostafaznv/larupload
Larupload is an ORM based file uploader for laravel to upload image, video, audio and other known files.
PHP★ 75↓ 22.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
probots-io/pinecone-php
A beautiful, extendable PHP Package to communicate with your pinecone.io indices, collections and vectors.
PHP★ 75↓ 13.4K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
flachesis/gemini-rust
A comprehensive Rust client library for Google's Gemini.
Rust★ 74↓ 5,093/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
marcalexiei/eslint-zod
ESLint plugin that adds custom linting rules to enforce best practices when using Zod
TypeScript★ 74Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0