Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,508
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,839 recordsRanked by popularity · browse by tag · record statistics
Packagist
32At Riskhealth index
mineadmin/mine-core
mineadmin core package
PHP★ 16↓ 710/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
28At Riskhealth index
palmetto/palmetto-design-tokens
Design tokens that power all Palmetto UIs.
JavaScript★ 16↓ 2,265/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
41Weakhealth index
pyro-ppl/pyro-api
Generic API for dispatch to Pyro backends.
Python★ 16↓ 605.6K/moOct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
npm
18Criticalhealth index
script-heads/stage-ui
Flexible UI Framework declared by your own Design System
TypeScript★ 16↓ 6,752/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
29At Riskhealth index
stevemao/compare-func
Get a compare function for array to sort
JavaScript★ 16↓ 52.2M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
strongloop/eslint-config-strongloop
Baseline eslint configuration for StrongLoop modules
JavaScript★ 16↓ 185.7K/moOct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
NuGet
18Criticalhealth index
JeremyVm/QuestPDF.HTML
HTMLToQPDF is an extension for QuestPDF that allows to generate PDF from HTML
C#★ 15Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
25At Riskhealth index
andrewrk/node-pend
dead-simple optimistic async helper in javascript
JavaScript★ 15↓ 185M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
32At Riskhealth index
counterapi/api
Counter Go application
Go★ 15Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
Maven
35Weakhealth index
eclipse-ee4j/expressly
Expressly, a Jakarta Expression Language implementation
Java★ 15Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
executablebooks/mdurl
URL utilities for markdown-it (a Python port)
Python · JavaScript★ 15↓ 427M/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
pantheon-systems/pantheon-mu-plugin
Pantheon's WordPress mu-plugin for all WordPress-based upstreams.
PHP★ 15↓ 29/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
41Weakhealth index
phptek/silverstripe-sentry
Flexible Sentry compatible bug aggregation client for Silverstripe applications.
PHP★ 15↓ 2,699/moOct 20, 2026
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Go
17Criticalhealth index
quasilyte/regex
Regular expression libraries for Go
Go★ 15Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
27At Riskhealth index
robertd/cdk-karpenter
AWS CDK Construct for installing Karpenter on top of an EKS cluster.
TypeScript★ 15↓ 221/moOct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
zeta-group/ZDCode
The language that compiles to ye olde DECORATE!
Python★ 15Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
Galaco/lambda-core
Set of core utilities for Source Engine tool development, written in Go
Go★ 14Oct 18, 2026
UnlicenseOct 18, 2026 · metrics 2.10.0
—
19Criticalhealth index
buildkite/test-collector-javascript
Moved to buildkite/bktest — Buildkite Test Engine collectors for JavaScript test frameworks
Mixed★ 14Oct 17, 2026
No licenseOct 17, 2026 · metrics 2.10.0
—
21At Riskhealth index
crocs-muni/CryptoStreams
Tool for generation of data from cryptoprimitives (block and stream ciphers, hash functions). Cryptoprimitives are round-reduced and the data can be configured for multiple testing scenarios.
C · C++★ 14Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
haines/yard-relative_markdown_links
A YARD plugin to allow relative links between Markdown files.
Ruby★ 14Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
npm
24At Riskhealth index
k4m4/esolangs
Detect and execute esoteric programming language code.
JavaScript★ 14↓ 33/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
8Criticalhealth index
masihgh/iranian-bank-list-js
A Javascript library to identify Iranian banks based on card numbers (first 6 digits) and IBANs. It also includes utility functions to validate card numbers and IBANs using standard algorithms.
JavaScript★ 14↓ 350/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
oroinc/customer-portal
OroCommerce package with customer portal and non authenticated visitor website base features.
PHP★ 14↓ 3,766/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
pulp/pulp_file
A Pulp plugin that manages File content, e.g. repositories of file content.
Python★ 14Oct 22, 2026
GPL-2.0Oct 22, 2026 · metrics 2.10.0
—
23At Riskhealth index
sbt/test-interface
Uniform test interface to Scala test frameworks (specs, ScalaCheck, ScalaTest)
Java · Scala★ 14Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/logger
[READ ONLY] LogFactory and global log listeners. Subtree split of the Spiral Logger component (see spiral/framework)
PHP★ 14↓ 750.4K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
10Criticalhealth index
txix-open/isp-kit
No repository description published.
Go★ 14Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0