Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,728
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,448 recordsRanked by popularity · browse by tag · record statistics
Go
10Criticalhealth index
txix-open/isp-kit
No repository description published.
Go★ 14Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm
19Criticalhealth index
xaccefy/pi-xpi
XPI — offensive security tools for Pi Agent: casefile, exploit search, web lookup, code intelligence, todo tracker
TypeScript★ 14↓ 2,871/moSep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/data-db
Database adapter for data interfaces
PHP★ 14↓ 2,119/moJul 31, 2026
BSD-3-ClauseJul 31, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
PHP★ 14↓ 9,483/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
yiisoft/translator-message-php
Yii i18n PHP message storage
PHP★ 14↓ 16.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
2Criticalhealth index
Duzopy/VRChat-Crasher
VRChat Crasher
ShaderLab · GLSL★ 13Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
43Weakhealth index
JuliaLang/NetworkOptions.jl
No repository description published.
Julia★ 13Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
17Criticalhealth index
JuliaWeb/HttpParser.jl
Deprecated! Julia wrapper for joyent/http-parser
Julia★ 13Sep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
MoseleyBioinformaticsLab/pdb_eda
A Python tool for parsing and analyzing electron density maps data available from the worldwide Protein Data Bank
Python★ 13Sep 8, 2026
Custom licenseSep 8, 2026 · metrics 2.10.0
npm · crates.io
35Weakhealth index
OpenRouterTeam/markdown-wasm
No repository description published.
Rust · TypeScript★ 13↓ 79.2K/moAug 3, 2026
Apache-2.0Aug 3, 2026 · metrics 2.10.0
Go
21At Riskhealth index
Qv2ray/gun-lite
Same gRPC Tunnel, but without gRPC / Protobuf
Go★ 13Aug 14, 2026
MITAug 14, 2026 · metrics 2.10.0
Packagist
46Weakhealth index
Sylius/SyliusShippingBundle
[READ-ONLY] Shipments, shipping methods and categories management for Symfony2.
PHP★ 13↓ 3,974/moSep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
WaffleLapkin/takecell
A cell type which value can only be taken once
Rust★ 13↓ 226.3K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
anyrun/anyrun-sdk
Simplify integration with ANY.RUN REST API services
Python★ 13↓ 22.5K/moAug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
12Criticalhealth index
beacon-biosignals/OndaFormat
A lightweight format for storing and manipulating sets of multi-sensor, multi-channel, LPCM-encodable, annotated, time-series recordings.
Mixed★ 13Aug 16, 2026
Custom licenseAug 16, 2026 · metrics 2.10.0
Go
13Criticalhealth index
cdktf/cdktf-provider-aws-go
CDK for Terraform Go provider bindings for aws.
Go★ 13Sep 1, 2026
MPL-2.0Sep 1, 2026 · metrics 2.10.0
Go
36Weakhealth index
covalenthq/erigon
Ethereum implementation on the efficiency frontier
Go★ 13Jul 27, 2026
LGPL-3.0Jul 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
dy/tst
Tests without efforts
JavaScript★ 13↓ 14.6K/moJul 31, 2026
Custom licenseJul 31, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
fact-project/pyfact
A python package with useful methods concernig the FACT-telescope
Python★ 13↓ 343/moAug 25, 2026
No licenseAug 25, 2026 · metrics 2.10.0
Go
24At Riskhealth index
hossein1376/kamune
Communication over untrusted networks
Go · Svelte★ 13Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
25At Riskhealth index
initCommerce/gato
A dart utility library inspired by javascript lodash library.
Dart★ 13Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
npm
6Criticalhealth index
mopsicus/shardy
Framework for online games and applications on Node.js
TypeScript★ 13↓ 26/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
runtimeverification/pyk
Python tools for the K Framework
Python★ 13Jul 18, 2026
BSD-3-ClauseJul 18, 2026 · metrics 2.10.0
npm
21At Riskhealth index
samn/json-stable-stringify
deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results
JavaScript★ 13↓ 526M/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
npm
18Criticalhealth index
script-heads/stage-ui
Flexible UI Framework declared by your own Design System
TypeScript★ 13↓ 8,176/moSep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
crates.io
33At Riskhealth index
sgodwincs/dlv-list-rs
No repository description published.
Rust★ 13↓ 7M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0