Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,582
Monthly downloads under inspection
380B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,354 recordsRanked by popularity · browse by tag · record statistics
npm
49At riskhealth index
react-declarative/react-declarative
A React form builder which interacts with a JSON endpoint to generate nested 12-column grids with input fields and automatic state management in a declarative style. Endpoint is typed by TypeScript guards (IntelliSense available). This tool is based on material-ui components, so your application will look beautiful on any device...
TypeScript★ 93↓ 1,636/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
ifaddr/ifaddr
Python Library to enumerate all network interfaces
Python★ 91Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
codename-hub/php-parquet
PHP implementation for reading and writing Apache Parquet files/streams
PHP★ 89↓ 23.2K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
RubyGems
30At riskhealth index
dry-rb/dry-transformer
Data transformation toolkit
Ruby★ 89Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
28Criticalhealth index
Roughsketch/imagesize
Quickly probe the size of various image formats without reading the entire file.
Rust★ 88↓ 3.1M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems · npm
22Criticalhealth index
simplecov-ruby/simplecov-html
HTML formatter for SimpleCov code coverage tool for ruby 1.9+
Ruby · CSS · TypeScript★ 88Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
15Criticalhealth index
blakeembrey/array-flatten
Flatten a multi-dimensional array in JavaScript.
JavaScript · TypeScript★ 86↓ 221M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
26Criticalhealth index
processone/fast_tls
TLS / SSL OpenSSL-based native driver for Erlang / Elixir
C · Erlang★ 86Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
39At riskhealth index
JBZoo/Data
Extended implementation of ArrayObject - useful collection for any config in your system (write, read, store, change, validate, convert to other format and etc).
PHP★ 85↓ 10.4K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
scaccogatto/vue-geolocation
Browser Geolocation API for Vue 3 — useGeolocation() composable + standalone promise-based functions. TypeScript. npm: vue-browser-geolocation
TypeScript★ 85↓ 6,615/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
30At riskhealth index
Smoren/itertools-ts
TypeScript Iteration Tools Library
TypeScript★ 84↓ 2,389/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
19Criticalhealth index
lddubeau/saxes
An evented streaming XML parser in JavaScript
TypeScript★ 84Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Maven
46At riskhealth index
vert-x3/vertx-grpc
gRPC for Vert.x
Java★ 84Jul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
RubyGems
14Criticalhealth index
dominikh/filesize
filesize is a small ruby class for handling filesizes with both the SI and binary prefixes, allowing conversion from any size to any other size.
Ruby★ 83Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
25Criticalhealth index
gulpjs/glob-parent
Extract the non-magic parent path from a glob string.
JavaScript★ 83↓ 1.3B/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Go
36At riskhealth index
hashicorp/packer-plugin-qemu
Packer plugin for QEMU Builder
Go · MDX★ 83Jul 19, 2026
MPL-2.0Jul 19, 2026 · metrics 1.13.0
Packagist
18Criticalhealth index
illuminate/redis
[READ ONLY] Subtree split of the Illuminate Redis component (see laravel/framework)
PHP★ 83↓ 189.8K/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
crates.io
26Criticalhealth index
itrous/bsl-analyzer
Анализатор кода BSL (1С:Предприятие) с поддержкой LSP. Написан на Rust.
Rust★ 83Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
25Criticalhealth index
xssnick/tonutils-storage
TON Storage golang implementation
Go★ 83Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
ehabterra/apispec
APISpec - Generate OpenAPI 3.1 specs from Go code with intelligent framework detection and call graph analysis. Supports Gin, Echo, Chi, Fiber, and net/http.
Go★ 82Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
rust-lang/jobserver-rs
No repository description published.
Rust★ 81↓ 34.3M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
22Criticalhealth index
sindresorhus/is-retry-allowed
Check whether a request can be retried based on the `error.code`
JavaScript★ 81↓ 63.7M/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go
34At riskhealth index
skycoin/skywire
Skywire Node implementation
Go★ 81Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
23Criticalhealth index
sunrise-php/vin
Simple VIN decoder for PHP 7.1+ based on ISO-3779
PHP★ 81↓ 3,990/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm · RubyGems
36At riskhealth index
fingerprintjs/fingerprintjs-pro-react-native
Official React Native client for Fingerprint. 100% accurate device identification for fraud detection.
TypeScript · JavaScript★ 80↓ 51.7K/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
crates.io
36At riskhealth index
leo91000/graphile_worker_rs
High performance Rust/PostgreSQL job queue (also suitable for getting jobs generated by PostgreSQL triggers/functions out into a different work queue)
Rust★ 80↓ 3,466/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
26Criticalhealth index
lpil/glance
👁️‍🗨️ A Gleam source code parser, in Gleam!
Gleam★ 80Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
nodelib/nodelib
Monorepo for NodeLib libraries
TypeScript · JavaScript★ 80Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
krowinski/bcmath-extended
Extends php BCMath lib for missing functions like floor, ceil, round, abs, min, max, rand for big numbers. Also wraps existing BCMath functions.
PHP★ 79↓ 31.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0