Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,590
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,647 recordsRanked by popularity · browse by tag · record statistics
npm
31At riskhealth index
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
JavaScript★ 5↓ 164M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
wooorm/is-decimal
Check if a character is decimal
JavaScript★ 5↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
29Criticalhealth index
1c-syntax/bsl-common-library
Библиотека базовых сущностей bsl, mdo
Java★ 4Jul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-a8c-mc-stats
[READ ONLY] Used to record internal usage stats for Automattic. Not visible to site owners. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 150.8K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-admin-ui
[READ ONLY] Generic Jetpack wp-admin UI elements. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 148.8K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-assets
[READ ONLY] Jetpack Asset Management. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 147.9K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-plugins-installer
[READ ONLY] Handle installation of plugins from WP.org This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 1,929/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist · npm
26Criticalhealth index
Automattic/woocommerce-analytics
[READ ONLY] Enhanced analytics for WooCommerce users. This repository is a mirror, for issue tracking and development head to: https://github.com/woocommerce/woocommerce/tree/trunk/packages/php/woocommerce-analytics
PHP★ 4↓ 103.4K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Go
9Criticalhealth index
Behnam-RK/dezhban
Cross-platform network kill switch (Go) — blocks traffic by geo-IP country
Go · Swift★ 4Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm
12Criticalhealth index
Krivega/sip-connector
TypeScript SDK для интеграции WebRTC-приложений с платформой Vinteo через SIP-протокол. Предоставляет высокоуровневый API для создания полнофункциональных видеоконференций.
TypeScript★ 4↓ 2,983/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · PyPI
34At riskhealth index
RamenDR/ramenctl
Command line tool and Go module for managing and troubleshooting Ramen
Go★ 4Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
SberBusiness/triplex-next
No repository description published.
TypeScript★ 4↓ 2,355/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Hex
20Criticalhealth index
annatel/antl_phonenumber
No repository description published.
Elixir · C++★ 4↓ 5,705/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
22Criticalhealth index
itmo-is-dev/platform
Platform libraries used in itmo-is-dev projects
C#★ 4Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
jridgewell/set-array
No repository description published.
TypeScript · JavaScript★ 4↓ 113M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
28Criticalhealth index
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
Mixed★ 4Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
41At riskhealth index
sinonjs/commons
Simple functions shared among the sinon end user libraries
JavaScript★ 4↓ 226M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
Go
20Criticalhealth index
vault-thirteen/TIFFer
TIFF format parser.
Go★ 4Jul 19, 2026
GPL-3.0Jul 19, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-entities-html4
Map of named character references from HTML 4
JavaScript★ 4↓ 148M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
JavaScript★ 4↓ 186M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
33At riskhealth index
wooorm/is-alphabetical
Check if a character is alphabetical
JavaScript★ 4↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
44At riskhealth index
1c-syntax/utils
No repository description published.
Java★ 3Jul 21, 2026
GPL-3.0Jul 21, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
Automattic/jetpack-boost-speed-score
[READ ONLY] A package that handles the API to generate the speed score. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 3↓ 1,908/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
23Criticalhealth index
Automattic/jetpack-config
[READ ONLY] Allows for enabling and initializing of Jetpack features provided by other packages. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 3↓ 144.5K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm · Packagist
28Criticalhealth index
Automattic/jetpack-shared-extension-utils
[READ ONLY] Utility functions used by the block editor extensions. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
JavaScript · TypeScript★ 3↓ 1,526/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Go
10Criticalhealth index
Exeteres/wg-feed
wg-feed is a draft protocol and reference implementation for distributing WireGuard tunnel configurations via subscription URLs
Go★ 3Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
—
5Criticalhealth index
Itskillmaster/spluspy
High-performance Python Self-Bot Framework for Soroush Plus
Python★ 3Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Go
27Criticalhealth index
Verity-BDD/verity-bdd
Screenplay pattern implementation for Go
Go★ 3Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
25Criticalhealth index
coderofstuff/hw-app-kaspa
Ledger JS library for kaspa
TypeScript★ 3Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0