Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,286
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,719 recordsRanked by popularity · browse by tag · record statistics
npm
38At riskhealth index
sindresorhus/mimic-response
Mimic a Node.js HTTP response stream
JavaScript★ 61↓ 253M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
23Criticalhealth index
spinnaker/front50
Spinnaker Metadata Repository Service
Java · Groovy · Kotlin★ 61Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
npm
42At riskhealth index
jonschlinkert/fill-range
Fill in a range of numbers or letters, positive or negative, optionally passing an increment or multiplier to use.
JavaScript★ 60↓ 661M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
mgeier/sphinx-last-updated-by-git
:watch: Get the "last updated" time for each Sphinx page from Git
Python★ 60↓ 503.5K/moJul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
—
22Criticalhealth index
processone/iconv
Fast encoding conversion library for Erlang / Elixir
Shell · Erlang★ 60Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
web-platform-dx/baseline-browser-mapping
baseline-browser-mapping exposes arrays of browsers compatible with Baseline Widely Available and specified Baseline year feature sets.
JavaScript · TypeScript★ 59↓ 556M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
NuGet
12Criticalhealth index
VahidFarahmandian/Jinget
Jinget is a high-performance .NET 8.0 framework built with DDD + CQRS at its core. It's your Swiss Army knife for cutting through boilerplate code and supercharging productivity.
C#★ 58Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
26Criticalhealth index
grammyjs/storages
Storage adapters for grammY sessions.
TypeScript★ 58Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-stratigility
PSR-7 middleware foundation for building and dispatching middleware pipelines
PHP★ 58↓ 215.4K/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
yiisoft/html
Handy library to generate HTML
PHP★ 58↓ 28.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
Intervention/zodiac
PHP Zodiac Sign Calculator
PHP★ 57↓ 4,372/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
30At riskhealth index
OHDSI/DatabaseConnector
An R package for connecting to databases using JDBC.
R★ 57Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
NuGet
27Criticalhealth index
danielklecha/SharpIppNext
A .NET Standard library for building Internet Printing Protocol (IPP) clients and servers.
C#★ 57Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
36At riskhealth index
gemini-testing/html-reporter
Html reporter for Testplane (ex-hermione)
TypeScript · JavaScript★ 57↓ 34.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
30At riskhealth index
jbgutierrez/path-parse
Node.js path.parse() ponyfill
JavaScript★ 57↓ 543M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io
42At riskhealth index
sfackler/foreign-types
No repository description published.
Rust★ 57↓ 55.3M/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Hex
28Criticalhealth index
code-supply/deps_nix
Mix task that converts Mix dependencies to Nix derivations
Elixir · Nix★ 56↓ 8,275/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
24Criticalhealth index
isaacs/wrappy
Callback wrapping utility
JavaScript★ 56Jul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
—
18Criticalhealth index
vans163/rebar3_auto
Rebar3 plugin to auto compile and reload on file change.
Erlang★ 56Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/arrays
Yii Array Helper
PHP★ 56↓ 78.4K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
yiisoft/view
Yii view rendering library
PHP★ 56↓ 16.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
NuGet
31At riskhealth index
JKorf/CoinEx.Net
A C# .netstandard client library for the CoinEx REST and Websocket Spot API focusing on clear usage and models
C#★ 55Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Packagist · npm
42At riskhealth index
archilex/filament-toggle-icon-column
A toggle icon column for Filament
PHP · Blade★ 55↓ 34.7K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
24Criticalhealth index
lrascao/rebar3_gpb_plugin
A rebar3 plugin for automatically compiling .proto files using the gpb protobuf compiler
Erlang★ 55Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
nbgrp/onelogin-saml-bundle
OneLogin SAML Symfony Bundle
PHP★ 55↓ 57.7K/moJul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
madewithlove/license-checker-php
CLI tool to verify used licenses in composer dependencies
PHP★ 54↓ 13.9K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
34At riskhealth index
reportportal/agent-js-playwright
Agent to integrate Playwright with ReportPortal.
TypeScript★ 54↓ 946K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-autoloader
[READ ONLY] Autoloader for Jetpack. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 53↓ 201K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
46At riskhealth index
keepsuit/laravel-temporal
Laravel integration with temporal.io workflow engine
PHP★ 53↓ 15.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
wesleytodd/setprototypeof
Polyfill for Object.setPrototypeOf
JavaScript★ 53↓ 450M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0