Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
35,685
Monthly downloads under inspection
378B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
298 recordsRanked by popularity · browse by tag · record statistics
npm
31At riskhealth index
wooorm/character-entities-html4
Map of named character references from HTML 4
JavaScript★ 4↓ 148M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
JavaScript★ 4↓ 186M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
33At riskhealth index
wooorm/is-alphabetical
Check if a character is alphabetical
JavaScript★ 4↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist · PyPI
30At riskhealth index
kenjis/CodeIgniter4
No repository description published.
PHP★ 3Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
16Criticalhealth index
lddubeau/xmlchars
Utilities for determining if characters belong to character classes defined by the XML specs.
TypeScript★ 3↓ 279M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
9Criticalhealth index
rhasspy/rhasspy-asr-vosk-hermes
MQTT service for speech to text with Vosk using Hermes protocol
Python · Shell★ 3Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
25Criticalhealth index
owen-d/loki
Like Prometheus, but for logs.
Go★ 2Jul 22, 2026
AGPL-3.0Jul 22, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
richardbporter/drush-users-commands
Drush commands to interact with multiple Drupal users.
PHP★ 2↓ 2,091/moJul 22, 2026
GPL-3.0Jul 22, 2026 · metrics 1.13.0
npm
33At riskhealth index
wooorm/is-hexadecimal
Check if a character is hexadecimal
JavaScript★ 2↓ 164M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · Maven
12Criticalhealth index
ExodusForks/react-native-netinfo
React Native Network Info API for Android & iOS
JavaScript · Java · Objective-C★ 1↓ 3,137/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
39At riskhealth index
ndeloof/docker
Docker - the open-source application container engine
Go★ 1Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
—
26Criticalhealth index
prusnak/nix-bitcoin
A collection of Nix packages and NixOS modules for easily installing full-featured Bitcoin nodes with an emphasis on security.
Nix★ 1Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
8Criticalhealth index
ExodusForks/bigint-buffer
💪🔢 bigint-buffer: Buffer Utilities for TC39 BigInt Proposal
TypeScript★ 0Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
31At riskhealth index
ExodusForks/commander.js
node.js command-line interfaces made easy
JavaScript★ 0Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm · Maven · RubyGems
26Criticalhealth index
ExodusForks/react-native-performance
Performance monitoring for React Native apps
TypeScript★ 0↓ 27/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
26Criticalhealth index
FelixTing/go-mod-configuration
Go module providing abstract configuration provider with Consul implementation | Owner: Core Working Group
Go★ 0Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go · npm
22Criticalhealth index
Jahn16/socialhabits
Fullstack Web App written in Go to help you track and share yours habits with the world
Svelte · TypeScript · Go★ 0Jul 22, 2026
GPL-3.0Jul 22, 2026 · metrics 1.13.0
Go
24Criticalhealth index
ameshkov/dns
DNS library in Go
Go★ 0Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
Go
42At riskhealth index
chaudum/loki
Like Prometheus, but for logs.
Go★ 0Jul 22, 2026
AGPL-3.0Jul 22, 2026 · metrics 1.13.0
Go · npm
29Criticalhealth index
fairhopeweb/focalboard
Focalboard is an open source, self-hosted alternative to Trello, Notion, and Asana.
TypeScript · HTML · Go★ 0Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
Go
26Criticalhealth index
mei-rune/gosnmp
An SNMP library written in GoLang.
Go★ 0Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
NuGet
25Criticalhealth index
nopara73/NBitcoin
Comprehensive Bitcoin library for the .NET framework.
C#★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
22Criticalhealth index
phox/esp32-ai-server-go
No repository description published.
Go★ 0Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Go · Packagist
21Criticalhealth index
rhafer/ocis
:atom_symbol: ownCloud Infinite Scale Stack
Go · Gherkin · PHP★ 0Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
Go
33At riskhealth index
sajayantony/distribution
The toolkit to pack, ship, store, and deliver container content
Go★ 0Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Go
25Criticalhealth index
shizhMSFT/distribution
The toolkit to pack, ship, store, and deliver container content
Go★ 0Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Go · npm
17Criticalhealth index
threefoldtecharchive/tfexplorer
No repository description published.
Go★ 0Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0