Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,685
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,178 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At Riskhealth index
yiisoft/di
PSR-11 compatible DI container and injector
PHP★ 236↓ 41.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
yiisoft/yii2-framework
[READ ONLY] Yii 2 framework core code only. This is a subtree split off the "yii2" repository
PHP★ 234↓ 471.9K/moAug 22, 2026
BSD-3-ClauseAug 22, 2026 · metrics 2.10.0
4Criticalhealth index
VisionVerse/Awesome-RGBT
RGB-T Fusion, RGB-T SOD, RGB-T Vehicle Detection, RGB-T Crowd Counting, RGB-T Pedestrian Detection, RGB-T Semantic Segmeantaion, RGB-T Tracking
Mixed★ 232Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
5Criticalhealth index
VisionVerse/RemoteSensing-Restoration-Survey
[ISPRS 2026] Remote Sensing Image Dehazing: A Systematic Review of Progress, Challenges, and Prospects
Python★ 229Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
14Criticalhealth index
orange-cpp/omath
Cross-platform modern general purpose game/mods/cheats development framework written in C++23.
C++★ 229Jul 20, 2026
ZlibJul 20, 2026 · metrics 2.10.0
34At Riskhealth index
scalameta/sbt-scalafmt
sbt plugin for Scalafmt
Scala★ 229Aug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.10.0
3Criticalhealth index
VisionVerse/Blind-Motion-Deblurring-Survey
Deep learning in motion deblurring: current status, benchmarks and future prospects[J], The Visual Computer, 2024.
Python · MATLAB★ 225Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
Laravel-Lang/publisher
Localization publisher for your Laravel application
PHP★ 218↓ 460.7K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
twirapp/twir
Twitch chat bot written on Golang and TypeScript.
Go · Vue · TypeScript★ 218Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
Maven
7Criticalhealth index
0x4f53/Wristkey
A free and open-source 2FA app for smartwatches.
Kotlin★ 217Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Go
12Criticalhealth index
Wissance/stringFormatter
A set of tools to manipulate text, i.e. making text from templates in C#/Python way is faster than fmt.Sprintf
Go★ 217Sep 1, 2026
Apache-2.0Sep 1, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-bootstrap4
Yii 2 Bootstrap 4 Extension
PHP★ 217↓ 51.5K/moAug 1, 2026
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/db
Yii Database Library
PHP★ 216↓ 25.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
11Criticalhealth index
basis-company/nats.php
nats jetstream client for php
PHP★ 208↓ 42.2K/moJul 29, 2026
No licenseJul 29, 2026 · metrics 2.10.0
crates.io
9Criticalhealth index
yury/cidre
Apple frameworks bindings for rust
Rust★ 208↓ 107.8K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
9Criticalhealth index
andreyryabin/sprint.migration
Миграции для разработчиков (1С-Битрикс)
PHP★ 207↓ 4,466/moJul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/multiocular
ꙮ Review dependencies changes to prevent supply chain attack
TypeScript · Svelte★ 206↓ 2,593/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Packagist
11Criticalhealth index
glushkovds/phpclickhouse-laravel
Adapter of the most popular library https://github.com/smi2/phpClickHouse to Laravel
PHP★ 205↓ 122.2K/moAug 19, 2026
MITAug 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-debug
Debug Extension for Yii 2
PHP · SCSS★ 203↓ 340.5K/moAug 1, 2026
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
benalavi/waveform
Generate waveform images from audio files
Ruby★ 202Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-gii
Yii 2 Gii Extension
PHP · SCSS★ 201↓ 213.1K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
JiLiZART/BBob
⚡️Blazing fast js bbcode parser, that transforms and parses bbcode to AST and transform it to HTML, React, Vue with plugin support in pure javascript, no dependencies
TypeScript★ 200↓ 568K/moAug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
21At Riskhealth index
TwP/servolux
Threads : Servers : Forks : Daemons
Ruby★ 196Jul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
ahoward/open4
open child process with handles on pid, stdin, stdout, and stderr: manage child processes and their io handles easily.
Ruby★ 190Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
Go · npm
13Criticalhealth index
alchemmist/lazy-tmux
Lazy tmux it is a fast session manager and saver for tmux. You can save all your session and lazy restore it.
Go · TypeScript★ 188Aug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
PyPI
11Criticalhealth index
sergey-dryabzhinsky/python-zstd
Simple python bindings to Yann Collet ZSTD compression library
C · Python★ 187Jul 21, 2026
BSD-2-ClauseJul 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
annetutil/annet
Configuration generation and deploying utility for network equipment
Python★ 186↓ 7,685/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
34At Riskhealth index
adplug/adplug
Hardware-independent AdLib sound player library
C++ · C★ 184Jul 19, 2026
LGPL-2.1Jul 19, 2026 · metrics 2.10.0
npm · PyPI
7Criticalhealth index
pomo-mondreganto/ForcAD
Pure-python distributable Attack-Defence CTF platform, created to be easily set up.
Python · Vue★ 184Aug 4, 2026
GPL-3.0Aug 4, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
yiisoft/yii2-bootstrap
Yii 2 Bootstrap 3 Extension
PHP★ 183↓ 212.2K/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 2.10.0