Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,400
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
418 recordsRanked by popularity · browse by tag · record statistics
npm
34At riskhealth index
wooorm/space-separated-tokens
Parse and stringify space-separated tokens
JavaScript★ 10↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
29Criticalhealth index
VdustR/hanamin
A webfont repository for Hanamin
CSS★ 9↓ 365/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
19Criticalhealth index
radxa/mraa
Linux Library for low speed IO Communication in C with bindings for C++, Python, Node.js & Java. Supports generic io platforms, as well as Intel Edison, Intel Joule, Raspberry Pi and many more.
C★ 9Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
23Criticalhealth index
wooorm/character-entities
Map of named character references.
JavaScript★ 9↓ 197M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/longest-streak
Count the longest repeating streak of a substring
JavaScript★ 9↓ 164M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io
27Criticalhealth index
CreepySkeleton/proc-macro-error
mirror of https://gitlab.com/CreepySkeleton/proc-macro-error
Rust★ 8↓ 28.1M/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
—
35At riskhealth index
MartiUK/cmder
Lovely console emulator package for Windows
C++ · PowerShell★ 8Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Maven
20Criticalhealth index
junxworks/junx
Junx toolkit是类似于google guava一样的工具包，辅助java开发人员开发应用程序，可以灵活构建服务器端应用程序，提供统一kv缓存接口封装，简单易懂的事件总线event bus，简单的生命周期管理接口service，常用工具类封装等。
Java★ 8Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Packagist
42At riskhealth index
kiwilan/php-xml-reader
PHP package to read XML with nice API.
PHP★ 7↓ 19.4K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Maven · npm
7Criticalhealth index
lounres/Kone
[WIP] Kotlin library for pure mathematics computational experiments
Kotlin★ 7Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
npm
25Criticalhealth index
rashfael/buntpapier
mixin-based component library
Stylus · Vue · JavaScript★ 7↓ 10.3K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
—
16Criticalhealth index
Arachnid/go-ethereum
Official golang implementation of the Ethereum protocol
Go★ 6Jul 22, 2026
LGPL-3.0Jul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
CodersCare/gridelements
Be part of the future of TYPO3! Support Gridelements now and unlock exclusive early access to v13! The well-established Gridelements V12 elevates TYPO3 by bringing grid-based layouts to content elements, with powerful features like advanced drag & drop and real references. Supercharge your workflow and make daily tasks easier. Sponsor us here:
PHP · JavaScript★ 6↓ 8,460/moJul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/ccount
Count how often a substring occurs
JavaScript★ 6↓ 163M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
15Criticalhealth index
joakimk/dboard
Dashboard framework
Ruby★ 5Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
—
26Criticalhealth index
nrfconnect/sdk-hal_nordic
NCS downstream of https://github.com/zephyrproject-rtos/hal_nordic
C★ 5Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
Go
19Criticalhealth index
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
Go★ 5Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
JavaScript★ 5↓ 164M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
wooorm/is-decimal
Check if a character is decimal
JavaScript★ 5↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
38At riskhealth index
jridgewell/set-array
No repository description published.
TypeScript · JavaScript★ 4↓ 113M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
28Criticalhealth index
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
Mixed★ 4Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
41At riskhealth index
sinonjs/commons
Simple functions shared among the sinon end user libraries
JavaScript★ 4↓ 226M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-entities-html4
Map of named character references from HTML 4
JavaScript★ 4↓ 148M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
JavaScript★ 4↓ 186M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
33At riskhealth index
wooorm/is-alphabetical
Check if a character is alphabetical
JavaScript★ 4↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
25Criticalhealth index
coderofstuff/hw-app-kaspa
Ledger JS library for kaspa
TypeScript★ 3Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
Packagist · PyPI
30At riskhealth index
kenjis/CodeIgniter4
No repository description published.
PHP★ 3Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
16Criticalhealth index
lddubeau/xmlchars
Utilities for determining if characters belong to character classes defined by the XML specs.
TypeScript★ 3↓ 279M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
9Criticalhealth index
rhasspy/rhasspy-asr-vosk-hermes
MQTT service for speech to text with Vosk using Hermes protocol
Python · Shell★ 3Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0