Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,411
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,608 recordsRanked by popularity · browse by tag · record statistics
Go
27Criticalhealth index
Verity-BDD/verity-bdd
Screenplay pattern implementation for Go
Go★ 3Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
25Criticalhealth index
coderofstuff/hw-app-kaspa
Ledger JS library for kaspa
TypeScript★ 3Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
Go
32At riskhealth index
deckhouse/csi-nfs
No repository description published.
Go★ 3Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Go
23Criticalhealth index
easyp-tech/protoc-gen-mcp
No repository description published.
Go · Python★ 3Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Go
26Criticalhealth index
jonbaldie/go-mutesting
Mutation testing for Go source code.
Go★ 3Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · PyPI
30At riskhealth index
kenjis/CodeIgniter4
No repository description published.
PHP★ 3Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
16Criticalhealth index
lddubeau/xmlchars
Utilities for determining if characters belong to character classes defined by the XML specs.
TypeScript★ 3↓ 279M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
RubyGems
45At riskhealth index
lutaml/expressir
Ruby parser for the ISO EXPRESS language
Ruby★ 3Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
RubyGems
44At riskhealth index
omnizip/excavate
Extract nested archives with a single command.
Ruby★ 3Jul 24, 2026
Custom licenseJul 24, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
phplrt/lexer
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
PHP★ 3↓ 3,224/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
phplrt/parser
[READ ONLY] Subtree split of the phplrt parser component (see phplrt/phplrt)
PHP★ 3↓ 2,846/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
PyPI
9Criticalhealth index
rhasspy/rhasspy-asr-vosk-hermes
MQTT service for speech to text with Vosk using Hermes protocol
Python · Shell★ 3Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
34At riskhealth index
smartcontractkit/chainlink-ccv
No repository description published.
Go★ 3Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
PyPI
27Criticalhealth index
tilde-lab/aiida-crystal-dft
AiiDA plugin for the ab initio modeling suite CRYSTAL, developed in Turin University
Python★ 3↓ 314/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/code-style
PHP CS Fixer rule sets for Yii packages.
PHP★ 3↓ 11.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
27Criticalhealth index
yiisoft/psr-emitter
PSR-7 HTTP response emitter
PHP★ 3↓ 10.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-boost-core
[READ ONLY] Core functionality for boost and relevant packages to depend on. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 1,914/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-codesniffer
[READ ONLY] phpcs sniffs for the Jetpack Coding Standard. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 1,979/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-explat
[READ ONLY] This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 1,881/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-image-cdn
[READ ONLY] Serve images through Jetpack's powerful CDN. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 1,863/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-ip
[READ ONLY] Utilities for working with IP addresses. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 19.7K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
27Criticalhealth index
Automattic/jetpack-plans
[READ ONLY] Fetch information about Jetpack Plans from wpcom This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 1,968/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-post-list
[READ ONLY] Enhance the classic view of the Admin section of your WordPress site. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP · CSS★ 2↓ 1,816/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-protect-status
[READ ONLY] A package containing the Protect Status API functionality to retrieve a site's scan status (WordPress, Themes, and Plugins threats). This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 1,881/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-publicize
[READ ONLY] Publicize makes it easy to share your site’s posts on several social media networks automatically when you publish a new post. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 1,797/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Maven · npm
34At riskhealth index
ExodusForks/react-native-webview
React Native Cross-Platform WebView
TypeScript · Java · Objective-C★ 2Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
28Criticalhealth index
ExodusForks/solana-web3.js
Solana JavaScript SDK
TypeScript★ 2Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
37At riskhealth index
JBZoo/Markdown
Rendering markdown from PHP code
PHP★ 2↓ 8,027/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
8Criticalhealth index
Lemon4ksan/g-man-cli
Background deamon and sidecar cli for g-man bots ⚙️
Go★ 2Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0