Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
38,402
Monthly downloads under inspection
380B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,762 recordsRanked by popularity · browse by tag · record statistics
Packagist
49At riskhealth index
NativePHP/desktop
Create desktop applications with PHP
PHP · TypeScript★ 408↓ 8,434/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Hex
22Criticalhealth index
arjan/decorator
Function decorators for Elixir
Elixir★ 406↓ 287.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
18Criticalhealth index
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
TypeScript★ 406↓ 205M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
43At riskhealth index
jshttp/on-finished
Execute a callback when a request closes, finishes, or errors
JavaScript★ 404↓ 472M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
32At riskhealth index
gecko0307/dagon
3D game engine for D
D★ 401Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
—
32At riskhealth index
onizet/html2openxml
Html2OpenXml is a small .Net library that convert simple or advanced HTML to plain OpenXml components. This program has started in 2009, initially to convert user's comments into templated Word.
C#★ 397Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
43At riskhealth index
amphp/byte-stream
A non-blocking stream abstraction for PHP based on Amp.
PHP★ 394↓ 3.3M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
24Criticalhealth index
jeremyevans/erubi
Small ERB Implementation
Ruby★ 394Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
12Criticalhealth index
lamoda/gonkey
Gonkey - a testing automation tool
Go★ 393Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
28Criticalhealth index
feature-sliced/steiger
Universal file structure and project architecture linter
TypeScript★ 390Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
CycloneDX/cyclonedx-python
CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments
Python★ 386↓ 2.1M/moJul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
RubyGems
22Criticalhealth index
janlelis/paint
Ruby gem for ANSI terminal colors 🎨︎ VERY FAST
Ruby★ 384Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
36At riskhealth index
microsoft/vscode-css-languageservice
CSS, LESS & SCSS language service extracted from VSCode to be reused, e.g in the Monaco editor.
TypeScript★ 382↓ 9.2M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
—
30At riskhealth index
unoplatform/Uno.Wasm.Bootstrap
A simple nuget package to run C# code in a WASM-compatible browser
WebAssembly · JavaScript★ 382Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
crates.io
32At riskhealth index
dtolnay/itoa
Fast function for printing integer primitives to a decimal string
Rust★ 379↓ 85.4M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
37At riskhealth index
mathiasbynens/regenerate
Generate JavaScript-compatible regular expressions based on a given set of Unicode symbols or code points.
JavaScript★ 378↓ 157M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
34At riskhealth index
maxfischer2781/asyncstdlib
the missing toolbox for an async world
Python★ 378Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
25Criticalhealth index
creationix/jsonparse
A streaming JSON parser written in pure JavaScript for node.js
JavaScript★ 370↓ 84M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · npm
33At riskhealth index
phikiphp/phiki
Syntax highlighting powered by TextMate grammars in PHP.
PHP★ 370↓ 262.7K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · npm
34At riskhealth index
logiscape/mcp-sdk-php
Model Context Protocol SDK for PHP
PHP★ 367↓ 17.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
23Criticalhealth index
KieranWynn/pyquaternion
A fully featured, pythonic library for representing and using quaternions
Python★ 366↓ 4.3M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
crates.io
49At riskhealth index
bytecodealliance/wasi-rs
WASI bindings for Rust
Rust★ 363↓ 47.8M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
viasite-ansible/ansible-role-zsh
Setup antigen with oh-my-zsh, powerlevel10k theme, fzf, autosuggestions, syntax-highlighting
PowerShell · Python · Jinja★ 361Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
24Criticalhealth index
pkrumins/node-tree-kill
kill trees of processes
JavaScript★ 359↓ 175M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
29Criticalhealth index
pybind/pybind11-stubgen
Generate stubs for python modules
Python★ 359Jul 21, 2026
Custom licenseJul 21, 2026 · metrics 1.13.0
PyPI
20Criticalhealth index
trezor/trezor-core
:lock: Don't use this repo, use the new monorepo instead:
Python · C★ 358Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
RubyGems
49At riskhealth index
dry-rb/dry-cli
General purpose Command Line Interface (CLI) framework for Ruby
Ruby★ 356Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
jonschlinkert/kind-of
Get the native JavaScript type of a value, fast. Used by superstruct, micromatch and many others!
JavaScript★ 354↓ 482M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
NuGet
32At riskhealth index
kniengine/kni
KNI is a cross-platform C# game framework.
C#★ 352Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0