Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,320
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,078 recordsRanked by popularity · browse by tag · record statistics
npm
30At Riskhealth index
PeculiarVentures/pvutils
pvutils is a set of common utility functions used in various Peculiar Ventures Javascript based projects.
TypeScript★ 6↓ 67.5M/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
Go
8Criticalhealth index
SagerNet/utls
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
Go★ 6Sep 20, 2026
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
Sherry-XLL/RecBole
A unified, comprehensive and efficient recommendation library
Python · Jupyter Notebook★ 6Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
Sylius/SyliusUiBundle
[READ-ONLY] Sylius user interface components.
PHP · Twig · JavaScript★ 6↓ 4,796/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
Taritsyn/AutoprefixerHost
.NET wrapper around the Andrey Sitnik's Autoprefixer.
JavaScript · C#★ 6Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist · npm
33At Riskhealth index
Weble/ZohoCrmApi
PHP SDK for Zoho CRM API v2
PHP★ 6↓ 21.5K/moSep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
PyPI
3Criticalhealth index
aMiscreant/OrangePi-Zero-3
Orange Pi Zero 3, including peripherals like TFT screens, sensors, and other essential hardware. It provides a collection of useful scripts and step-by-step guides to help streamline the setup and ensure seamless operation of your Orange Pi Zero 3 with various accessories.
Python · Shell★ 6Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
ahoward/options
options.rb handles keyword options in ruby in a simple and robust way
Ruby★ 6Oct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
PyPI
37Weakhealth index
aiidaplugins/aiida-crystal17
A plugin for AiiDA, to run the CRYSTAL17 code
Python · Shell★ 6Oct 25, 2026
LGPL-3.0Oct 25, 2026 · metrics 2.10.0
Go
34At Riskhealth index
aiven/go-client-codegen
A code generated Go client for Aiven API
Go★ 6Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
7Criticalhealth index
anatolijlaptev1991-ctrl/hermes-ru
🇷🇺 Russian localization for Hermes Agent Desktop (Windows). 2755 keys, 100% coverage. Merged catalog from two native-speaker co-authors. v1.2.1.
TypeScript · JavaScript★ 6↓ 281/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
RubyGems
28At Riskhealth index
andyw8/codeclimate-engine-rb
A simple way to create issues in the JSON format described in the Code Climate Engine specification
Ruby★ 6Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
26At Riskhealth index
apicat/datagen
数据生成 data generator data generation can be used for mock or test data such as database, CSV, JSON and other data generation scenarios
Go★ 6Sep 29, 2026
MITSep 29, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
autonomys/substrate
Substrate: The platform for blockchain innovators
Rust★ 6Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
crates.io
35Weakhealth index
balena-os/os-config
No repository description published.
Rust★ 6Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
bassprofressor-lab/openwolf-enhanced
Enhanced fork of OpenWolf — a token-conscious second brain for Claude Code, with bounded storage, self-maintenance (openwolf doctor), .wolfignore scoping, and tunable retention. AGPL-3.0.
TypeScript · JavaScript★ 6↓ 2,762/moSep 14, 2026
AGPL-3.0Sep 14, 2026 · metrics 2.10.0
npm
25At Riskhealth index
bigcommerce/data-store-js
A JavaScript library for managing application state
TypeScript★ 6↓ 8,941/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
20At Riskhealth index
boennemann/nerf-dart
No repository description published.
JavaScript★ 6↓ 10.5M/moSep 23, 2026
No licenseSep 23, 2026 · metrics 2.10.0
—
19Criticalhealth index
buildkite/test_collector_elixir
Moved to buildkite/bktest — Elixir adapter for Buildkite Test Engine which uses an ExUnit formatter to connect information about your tests
Mixed★ 6Oct 25, 2026
No licenseOct 25, 2026 · metrics 2.10.0
npm
14Criticalhealth index
chainloop-dev/docs
Source code for docs.chainloop.dev
JavaScript · Shell · CSS★ 6Oct 2, 2026
Apache-2.0Oct 2, 2026 · metrics 2.10.0
Go
12Criticalhealth index
chavacava/garif
A GO package to create and manipulate SARIF logs
Go★ 6Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
8Criticalhealth index
cloud-ru-tech/frontend-tools
No repository description published.
TypeScript · JavaScript★ 6↓ 29.2K/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
14Criticalhealth index
cloudwavego/protoc-gen-gin
从 protobuf 文件中生成使用 gin 的 http rpc 服务 (protobuf to gin code)
Go · Smarty★ 6Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Maven · PyPI
3Criticalhealth index
dddqmmx/so-vits-svc-cover
这是一个使用so-vits-svc进行ai翻唱的mirai插件
Java★ 6Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
2Criticalhealth index
dddqmmx/uvr5-cli
No repository description published.
Python★ 6Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
dfinity/verifiable-credentials-sdk
Repository containing a set of libraries to manage the verifiable credentials in Internet Computer
Rust · TypeScript★ 6↓ 5,765/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0