Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,668
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,628 recordsRanked by popularity · browse by tag · record statistics
Go
32At riskhealth index
xssnick/tonutils-go
TON SDK Library in pure Golang for interacting with The Open Network ecosystem using native protocols, such as ADNL, RLDP and etc.
Go★ 688Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
Intervention/validation
Missing Laravel Validation Rules
PHP★ 678↓ 153.2K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
15Criticalhealth index
dominictarr/through
simple way to create a ReadableWritable stream that works
JavaScript★ 671↓ 190M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
36At riskhealth index
una-ui/una-ui
The Atomic UI framework for Nuxt, powered by Unocss engine 💛
Vue · TypeScript★ 671↓ 7,912/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
27Criticalhealth index
acornjs/acorn-jsx
Alternative, faster React.js JSX parser
JavaScript★ 669↓ 509M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go · npm
31At riskhealth index
syncyomi/syncyomi
SyncYomi is an open-source project crafted to provide a seamless synchronization experience for your TachiyomiSY/Mihon (Mihon client is not implemented but it works the same probably will never be implemented)/manga reading progress and library across multiple devices.
Go · Vue★ 667Jul 21, 2026
GPL-2.0Jul 21, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
bybit-exchange/pybit
Official Python3 API connector for Bybit's HTTP and WebSockets APIs.
Python★ 663Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
imengyu/vue3-context-menu
A very simple context menu component for Vue3 一个简洁美观简单的Vue3右键菜单组件
Vue · TypeScript · SCSS★ 661↓ 40.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
44At riskhealth index
minimistjs/minimist
parse argument options
JavaScript★ 661↓ 543M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
suguru03/neo-async
Neo-Async is thought to be used as a drop-in replacement for Async, it almost fully covers its functionality and runs faster
JavaScript★ 653Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
40At riskhealth index
sindresorhus/find-up
Find a file or directory by walking up parent directories
JavaScript · TypeScript★ 642↓ 1.2B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI · crates.io
30At riskhealth index
indygreg/python-zstandard
Python bindings to the Zstandard (zstd) compression library
C · Python★ 638Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
28Criticalhealth index
thombashi/pytablewriter
pytablewriter is a Python library to write a table in various formats: AsciiDoc / CSV / Elasticsearch / HTML / JavaScript / JSON / LaTeX / LDJSON / LTSV / Markdown / MediaWiki / NumPy / Excel / Pandas / Python / reStructuredText / SQLite / TOML / TSV.
Python★ 630Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
49At riskhealth index
anywherelan/awl
Securely connect your devices into a private network. Mesh VPN, socks5 proxy server/client
Go★ 626Jul 24, 2026
MPL-2.0Jul 24, 2026 · metrics 1.13.0
Go
30At riskhealth index
Leadaxe/singbox-launcher
GUI launcher for sing-box. Written in Go.
Go★ 625Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
npm
29Criticalhealth index
l3tnun/EPGStation
Mirakurun を使用した録画管理ソフト
TypeScript · Vue★ 624Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
crates.io
30At riskhealth index
LiteSVM/litesvm
No repository description published.
Rust★ 623Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist · npm
32At riskhealth index
thedevdojo/auth
This is the repo for the DevDojo Auth package
Blade · PHP★ 623↓ 45.3K/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
shipmonk-rnd/composer-dependency-analyser
🚀 Fast detection of composer dependency issues (unused dependencies, shadow dependencies, misplaced dependencies)
PHP★ 622↓ 590.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
49At riskhealth index
browserslist/caniuse-lite
A smaller version of caniuse-db, with only the essentials!
JavaScript★ 613↓ 722M/moJul 19, 2026
CC-BY-4.0Jul 19, 2026 · metrics 1.13.0
npm
33At riskhealth index
beaugunderson/ip-address
💻 a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
TypeScript★ 612↓ 368M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
26Criticalhealth index
hiddentao/fast-levenshtein
Efficient Javascript implementation of Levenshtein algorithm with locale-specific collator support.
JavaScript★ 612↓ 519M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
dukeluo/eslint-plugin-check-file
ESLint rules for consistent filename and folder. Allows you to enforce a consistent naming pattern for the filename and folder.
JavaScript★ 608↓ 4.3M/moJul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
danthedeckie/simpleeval
Simple Safe Sandboxed Extensible Expression Evaluator for Python
Python★ 607Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
26Criticalhealth index
annotated-types/annotated-types
Reusable constraint types to use with typing.Annotated
Python★ 606↓ 751M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
34At riskhealth index
cmintey/wishlist
Wishlist is a self-hosted wishlist application that you can share with your friends and family. You no longer have to wonder what to get your family for the holidays, simply check their wishlist and claim any available item!
TypeScript · Svelte★ 602Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
39At riskhealth index
sindresorhus/escape-string-regexp
Escape RegExp special characters
JavaScript · TypeScript★ 598↓ 1.3B/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
gmpy2/gmpy2
General Multi-Precision arithmetic for Python (GMP, MPIR, MPFR, MPC)
C · Python★ 594↓ 544.4K/moJul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 1.13.0
Hex
28Criticalhealth index
msz/hammox
🏝 automated contract testing via type checking for Elixir functions and mocks
Elixir★ 593↓ 81.5K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0