Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,896
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,245 recordsRanked by popularity · browse by tag · record statistics
Packagist
22At Riskhealth index
sclable/xml-lint
A php tool to lint and validate xml files from the commandline.
PHP★ 23↓ 9,509/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
13Criticalhealth index
sindresorhus/code-point-at
ES2015 `String#codePointAt()` ponyfill
JavaScript★ 23↓ 35M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
storybookjs/icons
Library of icons used in apps and marketing sites
TypeScript★ 23↓ 69M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
RubyGems
24At Riskhealth index
tagomoris/msgpack-inspect
A tool to inspect and dump the MessagePack binary data: msgpack.org[msgpack-inspect]
Ruby★ 23Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Hex
18Criticalhealth index
vonagam/ash_jason
Ash resource extension for implementing Jason protocol
Elixir★ 23Oct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
npm
21At Riskhealth index
wj42ftns/replace-in-files
Replace text in one or more files or globs.
JavaScript★ 23↓ 80.5K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
—
22At Riskhealth index
xiang90/probing
No repository description published.
Go★ 23Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/user
Convenient user identity management and access checking.
PHP★ 23↓ 11.3K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
5Criticalhealth index
3F/hMSBuild
.bat scripts with full Package Manager inside for searching and wrapping MSBuild tools. All Visual Studio and .NET Framework versions
Batchfile★ 22Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
20At Riskhealth index
3rd-Eden/kuler
Color your terminal using CSS/hex color codes
JavaScript★ 22↓ 79.2M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Go
25At Riskhealth index
AZ-X/pique
An advanced DNS stub with Freedom, Privacy and Security --- THRICE UPON A TIME
Go★ 22Sep 16, 2026
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go
31At Riskhealth index
Ahmedhossamdev/PrintLayout
PrintLayout: A lightweight Go tool to visualize project directory structures in a clean, tree-like format. Perfect for exploring codebases, documenting projects, or understanding file organization at a glance. Simple, customizable, and developer-friendly.
Go★ 22Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
CeresDB/sqlness
An ergonomic, opinionated framework for SQL integration test.
Rust★ 22↓ 5,534/moOct 17, 2026
Apache-2.0Oct 17, 2026 · metrics 2.10.0
npm
13Criticalhealth index
MrRefactoring/trello.js
Type-safe Trello REST API client for TypeScript & JavaScript. ESM-only, tree-shakable, runtime-validated by Zod 4. Full coverage of boards, cards, lists, checklists, members, webhooks, organizations. Atlassian Trello SDK for Node.js 22+ and modern browsers.
TypeScript★ 22↓ 28K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
Taritsyn/DartSassHost
.NET wrapper around the Dart Sass.
JavaScript · C#★ 22Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
31At Riskhealth index
Yoast/yoast-components
Accessible React components by Yoast
JavaScript★ 22Oct 18, 2026
GPL-3.0Oct 18, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
aVadim483/fast-excel-templator
Lightweight and very fast Excel Spreadsheet generator from XLSX-templates in PHP
PHP★ 22↓ 9,820/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
19Criticalhealth index
alexandre-abrioux/golem-node
Dockerized Golem Network Provider Node
Dockerfile · Makefile · HCL★ 22Oct 9, 2026
MITOct 9, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
amphp/phpunit-util
Helper package to ease testing with PHPUnit.
PHP★ 22↓ 27K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
33At Riskhealth index
blizzy78/varnamelen
Go analyzer checking that the length of a variable's name matches its usage scope
Go★ 22Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
16Criticalhealth index
blocktree/go-owcrypt
openwallet supported crypto library
Go★ 22Sep 29, 2026
No licenseSep 29, 2026 · metrics 2.10.0
Go
19Criticalhealth index
celestiaorg/celestia-openrpc
OpenRPC client of celestia-node, without dependencies on celestia-node/celestia-app/cosmos-sdk.
Go★ 22Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
25At Riskhealth index
css-modules/icss-utils
Search & replace tokens during the linking stage of ICSS loading
JavaScript★ 22↓ 106M/moOct 20, 2026
ISCOct 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
dk1a/solidity-stringutils
StrSlice & Slice library for Solidity
Solidity★ 22↓ 90/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
RubyGems
21At Riskhealth index
e2/ruby_dep
Automatically helps determine supported Rubies based on .travis.yml file
Ruby★ 22Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
30At Riskhealth index
ehmo/gomoufox
Go library, CLI, and MCP server for Camoufox browser automation.
Go★ 22Sep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
31At Riskhealth index
flash-oss/aba-generator
Generate Australian banking ABA file
JavaScript★ 22↓ 18K/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Maven
31At Riskhealth index
goto1134/structurizr-d2-exporter
Export structurizr views to D2 diagrams
D2 · Kotlin · ASL★ 22Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
20At Riskhealth index
hughsk/is-typedarray
Detect whether or not an object is a Typed Array
JavaScript★ 22↓ 127M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0