Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,471
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,798 recordsRanked by popularity · browse by tag · record statistics
Packagist
32At Riskhealth index
Sylius/SyliusUiBundle
[READ-ONLY] Sylius user interface components.
PHP · Twig · JavaScript★ 6↓ 4,796/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
ahoward/options
options.rb handles keyword options in ruby in a simple and robust way
Ruby★ 6Oct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
dnsquery/ip-codec
Small package to encode or decode IP addresses from buffers to strings. Supports IPV4 and IPV6.
JavaScript★ 6Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
14Criticalhealth index
Go★ 6Oct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
jGaboardi/tigernet
Network topology via TIGER/Line Edges
Python★ 6Oct 20, 2026
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Maven
13Criticalhealth index
java-json-tools/jackson-coreutils
JSON Pointer (RFC 6901) and numeric JSON equivalence for Jackson (2.2.x)
Java★ 6Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
magic-akari/ecb
ECB block cipher algorithm written in pure Rust
Rust★ 6Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Packagist
40Weakhealth index
mautic/core-lib
No repository description published.
PHP · JavaScript★ 6↓ 3,329/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
Go
5Criticalhealth index
mayakovskiyy/engraulis
A monitoring microservice written in Go
Go★ 6Oct 19, 2026
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
crates.io · npm
19Criticalhealth index
paiml/trueno-viz
MOVED → https://github.com/paiml/aprender (crates/aprender-viz)
Rust · HTML★ 6↓ 296/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
19Criticalhealth index
smell-of-curry/pokebedrock-hub
Dragonfly-based hub server for PokeBedrock. Development moved to git.pokebedrock.com/pokebedrock/pokebedrock-hub — this copy is stale.
Go★ 6Oct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/security
[READ ONLY] RBAC security layer based on NIST definition, role/rule/permission associations, bulletproof. Subtree split of the Spiral Security component (see spiral/framework)
PHP★ 6↓ 698.3K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
31At Riskhealth index
wert-io/widget-initializer
Public NPM library for Wert partners to integrate. Also published to https://javascript.wert.io
JavaScript · TypeScript★ 6↓ 22.6K/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
npm
29At Riskhealth index
wooorm/web-namespaces
Map of web namespaces
JavaScript★ 6↓ 100M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
PyPI
7Criticalhealth index
Itskillmaster/spluspy
A fast, minimal, and fully-featured framework for Soroush Plus — self-bots and official bots
Python★ 5↓ 672/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
Kronuz/pyXapiand
Xapian indexing and querying server implemented in Python
Python★ 5Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
XRPLF/xbridge-cli
No repository description published.
Python★ 5Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
bootique/bootique-jdbc
JDBC DataSource integration with Bootique
Java★ 5Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
37Weakhealth index
eartharoid/i18n
⚡ A super fast, small, and simple message localisation library
JavaScript · TypeScript★ 5↓ 1,596/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Packagist · npm
19Criticalhealth index
gocodebox/lifterlms-blocks
WordPress Editor (Gutenberg) blocks for LifterLMS.
JavaScript · PHP★ 5↓ 5,135/moOct 23, 2026
No licenseOct 23, 2026 · metrics 2.10.0
npm
31At Riskhealth index
gravity-ui/playwright-tools
No repository description published.
TypeScript★ 5↓ 13.1K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm
20At Riskhealth index
JavaScript★ 5↓ 63.8M/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
jewettaij/dlpdb
collect statistics from the entire PDB library
Python · Shell★ 5↓ 22/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
20At Riskhealth index
kane50613/small-frame
Zero-dependency structured message frame for small binary messages.
TypeScript★ 5↓ 34/moOct 22, 2026
No licenseOct 22, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
magiclen/random-number
Generate random numbers quickly.
Rust★ 5↓ 51.4K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
22At Riskhealth index
mailsac/mailsac-typescript-api
Official Mailsac TypeScript/JavaScript Client Library
TypeScript · JavaScript★ 5↓ 62.1K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm · Maven
34At Riskhealth index
mindbox-cloud/react-native-sdk
No repository description published.
TypeScript · Kotlin · Swift★ 5↓ 2,199/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0