Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,324
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,270 recordsRanked by popularity · browse by tag · record statistics
—
16Criticalhealth index
ronggang/transmission-web-control
一个 Transmission 浏览器管理界面。Transmission Web Control is a custom web UI. （该项目不再维护。）
CSS · JavaScript · HTML★ 4,751Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · RubyGems
39At riskhealth index
werf/werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
Go★ 4,713Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
38At riskhealth index
SteveLTN/https-portal
A fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker.
Ruby · HTML★ 4,697Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
jendrikseipp/vulture
Find dead Python code
Python★ 4,697Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
archtechx/tenancy
Automatic multi-tenancy for Laravel. No code changes needed.
PHP★ 4,377↓ 580.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
38At riskhealth index
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
PHP★ 4,287↓ 387.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
26Criticalhealth index
XTLS/RealiTLScanner
A TLS server scanner for Reality
Go★ 4,177Jul 20, 2026
MPL-2.0Jul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
TypeScript★ 4,101↓ 2.2M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
taiga-family/taiga-ui
Angular components library for awesome people
TypeScript · HTML★ 4,023Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
andialbrecht/sqlparse
A non-validating SQL parser module for Python
Python★ 4,009Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
38At riskhealth index
koxudaxi/datamodel-code-generator
Generate Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON/YAML/CSV.
Python★ 3,972Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
32At riskhealth index
GDRETools/gdsdecomp
Godot reverse engineering tools
C++★ 3,902Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
pika/pika
Pure Python RabbitMQ/AMQP 0-9-1 client library
Python★ 3,871Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
40At riskhealth index
TanStack/db
The reactive client store for your API.
TypeScript★ 3,825↓ 5.7M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
26Criticalhealth index
css/csso
CSS minifier with structural optimizations
JavaScript · CSS★ 3,788↓ 117M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
26Criticalhealth index
martinothamar/Mediator
A high performance implementation of Mediator pattern in .NET using source generators.
C#★ 3,663Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
14Criticalhealth index
yandex/odyssey
Scalable PostgreSQL connection pooler
C★ 3,612Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI · npm
32At riskhealth index
pradyunsg/furo
A clean customizable documentation theme for Sphinx
Sass · HTML · Python★ 3,543Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
33At riskhealth index
sharpemu/sharpemu
An experimental PlayStation 5 emulator for Windows, Linux and macOS.
C#★ 3,507Jul 19, 2026
GPL-2.0Jul 19, 2026 · metrics 1.13.0
PyPI
36At riskhealth index
piskvorky/smart_open
Utils for streaming large files (S3, HDFS, gzip, bz2...)
Python★ 3,451↓ 68.7M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
symfony/event-dispatcher-contracts
Generic abstractions related to dispatching event
PHP★ 3,416↓ 16.7M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
padrino/padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
Ruby · Less★ 3,402Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · PyPI
40At riskhealth index
php-curl-class/php-curl-class
PHP Curl Class makes it easy to send HTTP requests and integrate with web APIs
PHP★ 3,301↓ 140.4K/moJul 20, 2026
UnlicenseJul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
pyutils/line_profiler
Line-by-line profiling for Python
Python · Cython★ 3,244Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
npm
35At riskhealth index
pillarjs/iconv-lite
Convert character encodings in pure javascript.
JavaScript★ 3,175↓ 1.1B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
37At riskhealth index
jaredwray/keyv
Simple key-value storage with support for multiple backends
TypeScript★ 3,164↓ 634M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
joke2k/django-environ
Django-environ allows you to utilize 12factor inspired environment variables to configure your Django application.
Python★ 3,163Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
38At riskhealth index
NaturalIntelligence/fast-xml-parser
Validate XML, Parse XML and Build XML rapidly without C/C++ based libraries and no callback.
JavaScript★ 3,118↓ 330M/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
RubyGems
22Criticalhealth index
trailblazer/cells
View components for Ruby and Rails.
Ruby★ 3,076Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
npm
28Criticalhealth index
micromatch/micromatch
Highly optimized wildcard and glob matching library. Faster, drop-in replacement to minimatch and multimatch. Used by square, webpack, babel core, yarn, jest, ract-native, taro, bulma, browser-sync, stylelint, nyc, ava, and many others! Follow micromatch's author: https://github.com/jonschlinkert
JavaScript★ 3,036↓ 669M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0