Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,019
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
374 recordsRanked by popularity · browse by tag · record statistics
npm
22Criticalhealth index
moll/json-stringify-safe
Like JSON.stringify, but doesn't throw on circular references
JavaScript★ 556Jul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
darylldoyle/svg-sanitizer
A PHP SVG/XML Sanitizer
PHP★ 545↓ 1.3M/moJul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 1.13.0
—
21Criticalhealth index
sfztools/sfizz
SFZ parser and synth c++ library, providing a JACK standalone client
C++ · C★ 532Jul 23, 2026
BSD-2-ClauseJul 23, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
php-coveralls/php-coveralls
PHP client library for Coveralls API.
PHP★ 515↓ 209.6K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
39At riskhealth index
component/escape-html
Escape string for use in HTML
JavaScript★ 491↓ 389M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
28Criticalhealth index
visionmedia/bytes.js
node byte string parser
JavaScript★ 475↓ 450M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · npm
32At riskhealth index
mokhosh/filament-kanban
Add kanban boards to your Filament pages
PHP · Blade★ 462↓ 11.3K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
22Criticalhealth index
eslint/doctrine
JSDoc parser
JavaScript★ 461↓ 471M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
27Criticalhealth index
AztecProtocol/aztec-connect
aztec connect repository
TypeScript · Solidity · C++★ 457↓ 544/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
25Criticalhealth index
doowb/ansi-colors
Easily add ANSI colors to your text and symbols in the terminal. ansi-colors is the official ansi styling library for gulp. Used by hundreds of projects, including enquirer, vscode, codeql, azure data studio, aws-cdk, redwoodjs, leaflet, mocha, and many others.
JavaScript · TypeScript★ 454↓ 206M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
17Criticalhealth index
devbookhq/splitter
React component for building split views like in VS Code
TypeScript★ 448↓ 100.8K/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
26Criticalhealth index
wuba/Taro-Mortgage-Calculator
首个 Taro 3 多端统一实例 - 支持 React Native，Weapp，H5。
TypeScript · SCSS★ 431Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
38At riskhealth index
Rich-Harris/estree-walker
Traverse an ESTree-compliant AST
JavaScript★ 424↓ 581M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
45At riskhealth index
HugoBlox/academic-file-converter
📚 Import Bibtex publications and Jupyter Notebook blog posts into your Markdown website or book. 将Bibtex转换为Markdown网站
Python · Jupyter Notebook★ 419Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
21Criticalhealth index
troygoode/node-require-directory
Recursively iterates over specified directory, requiring each file, and returning a nested hash structure containing those libraries.
JavaScript★ 409↓ 459M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
18Criticalhealth index
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
TypeScript★ 406↓ 205M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
37At riskhealth index
mathiasbynens/regenerate
Generate JavaScript-compatible regular expressions based on a given set of Unicode symbols or code points.
JavaScript★ 378↓ 157M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
25Criticalhealth index
creationix/jsonparse
A streaming JSON parser written in pure JavaScript for node.js
JavaScript★ 370↓ 84M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
pkrumins/node-tree-kill
kill trees of processes
JavaScript★ 359↓ 175M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
20Criticalhealth index
trezor/trezor-core
:lock: Don't use this repo, use the new monorepo instead:
Python · C★ 358Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
npm
27Criticalhealth index
jonschlinkert/kind-of
Get the native JavaScript type of a value, fast. Used by superstruct, micromatch and many others!
JavaScript★ 354↓ 482M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
16Criticalhealth index
redromnon/HeroicBashLauncher
Directly launch any Epic Games Store and GOG game from anywhere without Heroic on Linux.
Python★ 351Jul 24, 2026
GPL-3.0Jul 24, 2026 · metrics 1.13.0
npm
24Criticalhealth index
feross/safe-buffer
Safer Node.js Buffer API
JavaScript★ 350↓ 1.1B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
29Criticalhealth index
dougwilson/nodejs-depd
Deprecate all the things
JavaScript★ 329↓ 499M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
25Criticalhealth index
kframework/c-semantics
Semantics of C in K
C · OCaml★ 328Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
npm
22Criticalhealth index
epoberezkin/fast-json-stable-stringify
Deterministic JSON.stringify() - a faster version of @substack's json-stable-strigify without jsonify.
JavaScript★ 322↓ 586M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
garycourt/uri-js
An RFC 3986 compliant, scheme extendable URI parsing/validating/normalizing/resolving library for JavaScript
JavaScript · TypeScript★ 317↓ 573M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
jonschlinkert/clone-deep
Recursively (deep) clone JavaScript native types, like Object, Array, RegExp, Date as well as primitives. Used by superstruct, merge-deep, and many others!
JavaScript★ 317↓ 110M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
20Criticalhealth index
polaris-gslb/polaris-gslb
A free, open source GSLB (Global Server Load Balancing) solution.
Python★ 312Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0