Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,420
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,593 recordsRanked by popularity · browse by tag · record statistics
24Criticalhealth index
pyanodon/pyhightech
No repository description published.
Lua★ 15Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
teidesu/fuman
collection of packages that do not suck (hopefully)
TypeScript★ 15Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
10Criticalhealth index
txix-open/etp
Event transport protocol - alternative to socket.io
Go★ 15Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/definitions
The package provides definition syntax. Definition is describing a way to create and configure a service or an object.
PHP★ 15↓ 48.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/test-support
No repository description published.
PHP★ 15↓ 23.2K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
26Criticalhealth index
GNOME/libgit2-glib
Read-only mirror of https://gitlab.gnome.org/GNOME/libgit2-glib
C★ 14Jul 21, 2026
LGPL-2.1Jul 21, 2026 · metrics 1.13.0
npm
29Criticalhealth index
StenaIT/stenajs-webui
A collection of React components and hooks
TypeScript★ 14↓ 31K/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
alicomert/pixcode
Self-hosted AI coding agent control plane — Claude Code, Codex, Gemini CLI, Cursor, Qwen & OpenCode in one workspace. Chat, files, shell, Git, orchestration, Telegram, MCP, API automation.
TypeScript · JavaScript★ 14↓ 10.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
10Criticalhealth index
avto-dev/bank-card-vue-component
Vue.js component with bank card
JavaScript · Vue★ 14↓ 206/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
11Criticalhealth index
defunctzombie/node-stackback
return array of v8 CallSite objects for a stacktrace
JavaScript★ 14Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
35At riskhealth index
diplodoc-platform/components
No repository description published.
TypeScript · SCSS★ 14↓ 3,270/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
22Criticalhealth index
flipperdevices/stm32wb_copro
No repository description published.
C++ · C★ 14Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
npm
36At riskhealth index
gravity-ui/nodekit
Simple toolkit for Node.js applications and scripts
TypeScript★ 14↓ 36.9K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
32At riskhealth index
guzzle/test-server
A node.js server and a PHP controller class one can use when testing
JavaScript · PHP★ 14↓ 49.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
mcollina/aedes-persistence
In-memory implementation of an Aedes persistence, with abstract tests
JavaScript★ 14Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
30At riskhealth index
nanoframework/System.Net
📦 .NET nanoFramework System.Net Class Library
C#★ 14Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
32At riskhealth index
tiagosiebler/kucoin-api
Node.js & JavaScript SDK for Kucoin REST APIs & WebSockets, with TypeScript & browser support.
TypeScript★ 14↓ 8,160/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
24Criticalhealth index
xssnick/tonutils-storage-provider
Alternative TON Storage Provider implementation compatible with tonutils-storage
Go★ 14Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
PHP★ 14↓ 9,483/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
yiisoft/translator-message-php
Yii i18n PHP message storage
PHP★ 14↓ 16.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
Toflar/state-set-index
Implementation of the State Set Index Algorithm in PHP
PHP★ 13↓ 24K/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Hex
27Criticalhealth index
edgurgel/ham
Library to validate function arguments and return values against their typespecs. Extracted out from Hammox
Elixir★ 13↓ 120.9K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
24Criticalhealth index
hossein1376/kamune
Communication over untrusted networks
Go · Svelte★ 13Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
18Criticalhealth index
nikitalita/gdsdecomp
Godot reverse engineering tools
C++★ 13Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
24Criticalhealth index
pyanodon/pypetroleumhandling
No repository description published.
Lua★ 13Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
27Criticalhealth index
samn/json-stable-stringify
deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results
JavaScript★ 13↓ 508M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/cache-file
Yii Cache Library - File Handler
PHP★ 13↓ 7,843/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0