Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,612
Monthly downloads under inspection
558B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,468 recordsRanked by popularity · browse by tag · record statistics
Packagist
28At Riskhealth index
TheDragonCode/support
Support package is a collection of helpers and tools for projects.
PHP★ 23↓ 511.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
amphp/uri
Uri Parser and Resolver.
PHP★ 23↓ 8,586/moAug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
PyPI
4Criticalhealth index
chihongze/shard.py
shard.py 是在web.py数据库访问模块的基础上增加了读写分离、shard以及ORM的功能
Python★ 23↓ 14/moAug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
npm
28At Riskhealth index
colorjs/color-alpha
Change alpha of a color string
JavaScript★ 23↓ 3.2M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
npm
14Criticalhealth index
exercism/gui
No repository description published.
JavaScript · HTML★ 23Aug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
14Criticalhealth index
flatcar/coreos-overlay
moved to https://github.com/flatcar/scripts/tree/main/sdk_container/src/third_party - package build scripts for Flatcar Container Linux, with custom overlay on kinvolk/portage-stable
Shell★ 23Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 2.10.0
npm
28At Riskhealth index
gky360/react-ngl
React wrapper for ngl
TypeScript★ 23↓ 23.3K/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
npm
28At Riskhealth index
isaacs/color-support
A module which will endeavor to guess your terminal's level of color support.
JavaScript★ 23↓ 74.5M/moAug 31, 2026
ISCAug 31, 2026 · metrics 2.10.0
14Criticalhealth index
kinvolk/coreos-overlay
moved to https://github.com/flatcar/scripts/tree/main/sdk_container/src/third_party - package build scripts for Flatcar Container Linux, with custom overlay on kinvolk/portage-stable
Shell★ 23Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
lidofinance/ui
React UI Components for Lido projects.
TypeScript★ 23↓ 8,113/moJul 29, 2026
MITJul 29, 2026 · metrics 2.10.0
npm
16Criticalhealth index
lukasturcani/mol-draw
A lightweight, 3D molecular viewer for JavaScript and PureScript applications.
PureScript · JavaScript★ 23↓ 115/moSep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
npm
29At Riskhealth index
micromatch/is-extglob
Returns true if a string has an extglob
JavaScript★ 23Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
10Criticalhealth index
ngmoco/syslog_logger
An improved Logger replacement that logs to syslog. It is almost drop-in with a few caveats.
Ruby★ 23Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
pear/HTML_QuickForm2
Provides methods to create, validate and render HTML forms in PHP.
PHP · JavaScript★ 23↓ 9,861/moAug 28, 2026
No licenseAug 28, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
privacyidea/simplesamlphp-module-privacyidea
:fish: OTP Two Factor Authentication Module for simpleSAMLphp to run with privacyIDEA
PHP · JavaScript · Twig★ 23↓ 43/moAug 17, 2026
AGPL-3.0Aug 17, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
sclable/xml-lint
A php tool to lint and validate xml files from the commandline.
PHP★ 23↓ 7,974/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
sphinx-contrib/images
sphinxcontrib-images extension
Python★ 23Aug 19, 2026
Apache-2.0Aug 19, 2026 · metrics 2.10.0
npm · crates.io
28At Riskhealth index
westrik/mdpdf
Convert Markdown to PDF using a self-contained Rust binary (CLI or Node.js)
Rust · JavaScript★ 23↓ 20.3K/moSep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
6Criticalhealth index
3F/7z.Libs
📦📦 🗜 An automated build of the `7z.Libs` NuGet packages.
Batchfile★ 22Aug 6, 2026
MITAug 6, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
Taritsyn/DartSassHost
.NET wrapper around the Dart Sass.
JavaScript · C#★ 22Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Packagist
40Weakhealth index
amphp/phpunit-util
Helper package to ease testing with PHPUnit.
PHP★ 22↓ 17.5K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Go
35Weakhealth index
blizzy78/varnamelen
Go analyzer checking that the length of a variable's name matches its usage scope
Go★ 22Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
8Criticalhealth index
cloud-ru-tech/snack-uikit
No repository description published.
TypeScript · SCSS · CSS★ 22Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
css-modules/icss-utils
Search & replace tokens during the linking stage of ICSS loading
JavaScript★ 22↓ 111M/moAug 22, 2026
ISCAug 22, 2026 · metrics 2.10.0
Maven
31At Riskhealth index
goto1134/structurizr-d2-exporter
Export structurizr views to D2 diagrams
D2 · Kotlin · ASL★ 22Aug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
npm
17Criticalhealth index
iam-medvedev/chrome-devtools
Automated Chrome DevTools frontend builder
JavaScript★ 22↓ 522/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
npm · Packagist
17Criticalhealth index
javiereguiluz/EasyAdminBundle
The new (and simple) admin generator for Symfony applications.
PHP · Twig★ 22Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
9Criticalhealth index
jsdom/domexception
An implementation of the DOMException class from browsers
Mixed★ 22Aug 31, 2026
No licenseAug 31, 2026 · metrics 2.10.0
npm
37Weakhealth index
jsdom/w3c-xmlserializer
An XML serializer that follows the W3C specification.
JavaScript★ 22↓ 290M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0