Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,952
Monthly downloads under inspection
624B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,493 recordsRanked by popularity · browse by tag · record statistics
npm
28At Riskhealth index
knownasilya/cli-width
Fallback to a default if `process.stdout.getWindowSize` doesn't exist
JavaScript★ 24↓ 282M/moSep 16, 2026
ISCSep 16, 2026 · metrics 2.10.0
npm
15Criticalhealth index
msobkyy/backbook-server
Mern Facebook Clone with real time Messages Server (MongoDB, Express.js, React.js, Node.js, and Socket.io)
JavaScript · Pug★ 24Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
spatie/Laravel-Excel
🚀 Supercharged Excel exports and imports in Laravel
PHP★ 24Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
33At Riskhealth index
spiral/attributes
PHP Attributes Reader. Subtree split of the Spiral Attributes component (see spiral/framework)
PHP★ 24↓ 313.1K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
sprintertech/sygma-solidity
No repository description published.
JavaScript · Solidity★ 24Sep 19, 2026
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
postcss/postcss-parser-tests
Base tests for every PostCSS CSS parser
JavaScript · CSS★ 23↓ 6,208/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
13Criticalhealth index
sindresorhus/code-point-at
ES2015 `String#codePointAt()` ponyfill
JavaScript★ 23↓ 35M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
5Criticalhealth index
3F/hMSBuild
.bat scripts with full Package Manager inside for searching and wrapping MSBuild tools. All Visual Studio and .NET Framework versions
Batchfile★ 22Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
31At Riskhealth index
Ahmedhossamdev/PrintLayout
PrintLayout: A lightweight Go tool to visualize project directory structures in a clean, tree-like format. Perfect for exploring codebases, documenting projects, or understanding file organization at a glance. Simple, customizable, and developer-friendly.
Go★ 22Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
13Criticalhealth index
MrRefactoring/trello.js
Type-safe Trello REST API client for TypeScript & JavaScript. ESM-only, tree-shakable, runtime-validated by Zod 4. Full coverage of boards, cards, lists, checklists, members, webhooks, organizations. Atlassian Trello SDK for Node.js 22+ and modern browsers.
TypeScript★ 22↓ 28K/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
26At Riskhealth index
dk1a/solidity-stringutils
StrSlice & Slice library for Solidity
Solidity★ 22↓ 90/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Maven
31At Riskhealth index
goto1134/structurizr-d2-exporter
Export structurizr views to D2 diagrams
D2 · Kotlin · ASL★ 22Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
20At Riskhealth index
hughsk/is-typedarray
Detect whether or not an object is a Typed Array
JavaScript★ 22↓ 127M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
36Weakhealth index
jsdom/w3c-xmlserializer
An XML serializer that follows the W3C specification.
JavaScript★ 22↓ 318M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Hex
23At Riskhealth index
mirego/plug_image_processing
Endpoint to process images within your Plug application, compatible with imaginary API
Elixir★ 22↓ 1,750/moSep 17, 2026
BSD-3-ClauseSep 17, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
niklastreml/gitlab-tui
A terminal based UI for interacting with your gitlab issues and merge requests
Rust★ 22↓ 13/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/worker
Base PHP worker for RoadRunner server.
PHP★ 22↓ 771.8K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
31At Riskhealth index
syncmaven/syncmaven
Open-source Reverse-ETL and Data Activation
TypeScript★ 22Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
6Criticalhealth index
3F/7z.Libs
📦📦 🗜 An automated build of the `7z.Libs` NuGet packages.
Batchfile★ 21Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
elastic/elastic-transport-php
No repository description published.
PHP★ 21↓ 1.5M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
crates.io · Go
31At Riskhealth index
kroma-network/zkevm-circuits
This is a mirror of zkevm-circuits(https://github.com/scroll-tech/zkevm-circuits).
Rust★ 21Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Akurganow/use-persisted-state
React useState hook with persistence to localStorage, sessionStorage, and extension storage (chrome.storage / browser.storage)
TypeScript · JavaScript★ 20↓ 2,193/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
28At Riskhealth index
TACC/Galaxy
Galaxy is an asynchronous parallel visualization ray tracer for performant rendering in distributed computing environments. Galaxy builds upon Intel OSPRay and Intel Embree, including ray queueing and sending logic inspired by TACC GraviT.
C++ · CMake★ 20Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go · npm
27At Riskhealth index
algonius/algonius-browser
MCP browser automation server. Exposes browser control tools to external AI systems via Model Context Protocol. Open-source & secure.
TypeScript · Go★ 20Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
RubyGems
40Weakhealth index
chatwoot/twitty
Ruby client for Twitter Business APIs
Ruby★ 20Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm · PyPI
16Criticalhealth index
opnfv/samplevnf
Mirror of the OPNFV Sample Virtual Network Function Project
C★ 20Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0