Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,592
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,177 recordsRanked by popularity · browse by tag · record statistics
Packagist
13Criticalhealth index
shetabit/multipay
simple PHP payment package , supports multiple drivers
PHP★ 298↓ 8,136/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
Calabonga/Microservice-Template
Templates for microservice architecture. Nimble Microservice Framework contains two modules. The first with OpenIddict and the second without OpenIddict. Templates are built on ASP.NET Core platform with different versions Core3.1, NET6, NET7 and NET8. You can create a new project extremely fast: in Visual Studio, Rider, dotnet CLI.
C#★ 285Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm · PyPI
32At Riskhealth index
rzk-lang/rzk
An experimental proof assistant based on a type theory for synthetic ∞-categories.
Haskell★ 285Jul 28, 2026
No licenseJul 28, 2026 · metrics 2.10.0
7Criticalhealth index
Rirusha/Cassette
Read-only mirror of https://gitlab.gnome.org/Rirusha/Cassette
Vala · Meson · Shell★ 284Aug 1, 2026
GPL-3.0Aug 1, 2026 · metrics 2.10.0
26At Riskhealth index
fsharp/fsharp-compiler-docs
Doc build for FSharp.Compiler.Service
Mixed★ 281Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
VenusProtocol/venus-protocol
BNB Smart Chain Venus Protocol
TypeScript · Solidity★ 278↓ 16.3K/moJul 29, 2026
BSD-3-ClauseJul 29, 2026 · metrics 2.10.0
Go
34At Riskhealth index
PasarGuard/node
PasarGuard Node | Decentralized Censorship-Resistant Access Layer
Go★ 277Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
defunkt/colored
Colors in your terminal. Unmaintained.
Ruby★ 274Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
dodobrands/WebAuthn.Net
WebAuthn (Passkeys) library for .NET.
C#★ 271Sep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
Packagist
10Criticalhealth index
Chi-teck/drupal-code-generator
A code generator for Drupal.
PHP★ 268↓ 984.1K/moAug 8, 2026
GPL-2.0Aug 8, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
neos/neos-ui
Neos CMS UI written in ReactJS with Immutable data structures.
TypeScript · JavaScript · PHP★ 267↓ 15.2K/moSep 5, 2026
GPL-3.0Sep 5, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
mbk-dev/okama
Investment portfolio and stocks analyzing tools for Python with free historical data
Python★ 266Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
9Criticalhealth index
VahidN/DNTCaptcha.Core
DNTCaptcha.Core is a captcha generator and validator for ASP.NET Core applications
SCSS · HTML · JavaScript★ 265Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
PyPI
7Criticalhealth index
emmetio/sublime-text-plugin
The essential toolkit for web-developers
Python★ 265Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
npm
34At Riskhealth index
radix-ng/primitives
Headless, signals-first UI primitives for Angular. Accessible. Customizable.
TypeScript★ 265↓ 9,283/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openpmix/openpmix
OpenPMIx Project Repository
C★ 264Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
ruby-grape/grape-swagger-rails
Swagger UI as Rails Engine for grape-swagger gem.
Ruby · JavaScript · TypeScript★ 260Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-apidoc
API documentation generator
HTML · PHP★ 260↓ 4,114/moJul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
npm
17Criticalhealth index
dcos/dcos-ui
The UI for The Datacenter Operating System
TypeScript★ 256↓ 0/moAug 16, 2026
Apache-2.0Aug 16, 2026 · metrics 2.10.0
NuGet
13Criticalhealth index
edwardgushchin/SDL3-CS
Modern C# bindings and native NuGet packages for SDL3 and its companion libraries.
C#★ 253Jul 27, 2026
ZlibJul 27, 2026 · metrics 2.10.0
npm
34At Riskhealth index
consta-design-system/uikit
No repository description published.
TypeScript · MDX★ 249↓ 34.1K/moAug 16, 2026
MITAug 16, 2026 · metrics 2.10.0
Go
30At Riskhealth index
joomcode/redispipe
High-throughput Redis client for Go with implicit pipelining
Go★ 248Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Maven
11Criticalhealth index
yandex/yatagan
Dependency Injection framework based on Google's Dagger2 API, optimized for fast builds and for managing large graphs with optional dependencies
Kotlin★ 248Sep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
plaid/plaid-ruby
Ruby bindings for Plaid
Ruby★ 247Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
RubyGems
11Criticalhealth index
DmitryTsepelev/rubocop-graphql
Rubocop extension for enforcing graphql-ruby best practices
Ruby★ 245Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
RubyGems
33At Riskhealth index
chuckremes/ffi-rzmq
FFI bindings for ZeroMQ so the library can be used under JRuby and other FFI-compliant ruby runtimes
Ruby★ 245Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
PyPI
9Criticalhealth index
romis2012/aiohttp-socks
Proxy (HTTP, SOCKS) connector for aiohttp
Python★ 242Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
sajya/server
Implement the JSON-RPC 2.0 server specification for @Laravel
PHP★ 240↓ 22.5K/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0