Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,437
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,313 recordsRanked by popularity · browse by tag · record statistics
—
34At riskhealth index
c3lang/c3c
Compiler for the C3 language
C3 · C★ 5,680Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
NuGet · PyPI
32At riskhealth index
ClosedXML/ClosedXML
ClosedXML is a .NET library for reading, manipulating and writing Excel 2007+ (.xlsx, .xlsm) files. It aims to provide an intuitive and user-friendly interface to dealing with the underlying OpenXML API.
C#★ 5,654Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
spatie/browsershot
Convert HTML to an image, PDF or string
PHP★ 5,237↓ 1.6M/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
theseer/tokenizer
A small library for converting tokenized PHP source code into XML (and potentially other formats)
PHP★ 5,199↓ 14.3M/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI · crates.io
49At riskhealth index
pgmq/pgmq
A lightweight message queue. Like AWS SQS and RSMQ but on Postgres.
PLpgSQL · Rust · Python★ 5,028↓ 38.2K/moJul 21, 2026
PostgreSQLJul 21, 2026 · metrics 1.13.0
Packagist
49At riskhealth index
Codeception/Codeception
Full-stack testing PHP framework
PHP★ 4,859↓ 1.3M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
geopy/geopy
Geocoding library for Python.
Python★ 4,836↓ 19M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
16Criticalhealth index
ronggang/transmission-web-control
一个 Transmission 浏览器管理界面。Transmission Web Control is a custom web UI. （该项目不再维护。）
CSS · JavaScript · HTML★ 4,751Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · RubyGems
39At riskhealth index
werf/werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
Go★ 4,713Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
RubyGems
38At riskhealth index
SteveLTN/https-portal
A fully automated HTTPS server powered by Nginx, Let's Encrypt and Docker.
Ruby · HTML★ 4,697Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
jendrikseipp/vulture
Find dead Python code
Python★ 4,697Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
archtechx/tenancy
Automatic multi-tenancy for Laravel. No code changes needed.
PHP★ 4,377↓ 580.1K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
38At riskhealth index
EasyCorp/EasyAdminBundle
EasyAdmin is a fast, beautiful and modern admin generator for Symfony applications.
PHP★ 4,287↓ 387.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
26Criticalhealth index
XTLS/RealiTLScanner
A TLS server scanner for Reality
Go★ 4,177Jul 20, 2026
MPL-2.0Jul 20, 2026 · metrics 1.13.0
Packagist · npm
38At riskhealth index
laravel/horizon
Dashboard and code-driven configuration for Laravel queues.
PHP · Vue★ 4,156↓ 3.9M/moJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
npm
38At riskhealth index
acacode/swagger-typescript-api
Generate the API Client for Fetch or Axios from an OpenAPI Specification
TypeScript★ 4,101↓ 2.2M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
taiga-family/taiga-ui
Angular components library for awesome people
TypeScript · HTML★ 4,023Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
andialbrecht/sqlparse
A non-validating SQL parser module for Python
Python★ 4,009Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI
38At riskhealth index
koxudaxi/datamodel-code-generator
Generate Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON/YAML/CSV.
Python★ 3,972Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
32At riskhealth index
GDRETools/gdsdecomp
Godot reverse engineering tools
C++★ 3,902Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
pika/pika
Pure Python RabbitMQ/AMQP 0-9-1 client library
Python★ 3,871Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
40At riskhealth index
TanStack/db
The reactive client store for your API.
TypeScript★ 3,825↓ 5.7M/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm
26Criticalhealth index
css/csso
CSS minifier with structural optimizations
JavaScript · CSS★ 3,788↓ 117M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
26Criticalhealth index
martinothamar/Mediator
A high performance implementation of Mediator pattern in .NET using source generators.
C#★ 3,663Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
14Criticalhealth index
yandex/odyssey
Scalable PostgreSQL connection pooler
C★ 3,612Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
PyPI · npm
32At riskhealth index
pradyunsg/furo
A clean customizable documentation theme for Sphinx
Sass · HTML · Python★ 3,543Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
33At riskhealth index
sharpemu/sharpemu
An experimental PlayStation 5 emulator for Windows, Linux and macOS.
C#★ 3,507Jul 19, 2026
GPL-2.0Jul 19, 2026 · metrics 1.13.0
PyPI
36At riskhealth index
piskvorky/smart_open
Utils for streaming large files (S3, HDFS, gzip, bz2...)
Python★ 3,451↓ 68.7M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
symfony/event-dispatcher-contracts
Generic abstractions related to dispatching event
PHP★ 3,416↓ 16.7M/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
32At riskhealth index
padrino/padrino-framework
Padrino is a full-stack ruby framework built upon Sinatra.
Ruby · Less★ 3,402Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0