Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,627
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,178 recordsRanked by popularity · browse by tag · record statistics
Go
34At Riskhealth index
ydb-platform/ydb-go-sdk
Pure Go native and database/sql driver for YDB
Go★ 182Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
Packagist
33At Riskhealth index
yiisoft/yii2-coding-standards
Yii 2 coding standards
PHP★ 182↓ 42.3K/moAug 3, 2026
No licenseAug 3, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-sphinx
Yii 2 Sphinx extension.
PHP★ 180↓ 11.6K/moAug 13, 2026
BSD-3-ClauseAug 13, 2026 · metrics 2.10.0
6Criticalhealth index
osminogin/docker-tor-simple
Simplest minimal container for Tor anonymity software based on Alpine
Dockerfile · Makefile★ 176Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
chtd/psycopg2cffi
Port to cffi with some speed improvements
Python★ 174Aug 8, 2026
Custom licenseAug 8, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-mvc
Laminas's event-driven MVC layer, including MVC Applications, Controllers, and Plugins
PHP★ 173↓ 460.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Go
13Criticalhealth index
Antonboom/testifylint
The Golang linter that checks usage of github.com/stretchr/testify.
Go★ 172Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
RubyGems · npm
83Excellenthealth index
tdiary/tdiary-core
tDiary, The TSUKKOMI-able Weblog.
Ruby★ 171Jul 22, 2026
GPL-2.0Jul 22, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
WildGums/Orc.Controls
Timespan, DateTime and various other controls
C#★ 168Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nwjs/npm-installer
npm installer for NW.js
JavaScript★ 167↓ 17.2K/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/validator
Yii validator library
PHP★ 167↓ 18.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
8Criticalhealth index
Octonica/ClickHouseClient
ClickHouse .NET Core driver
C#★ 166Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
cybercog/laravel-clickhouse
Laravel ClickHouse adds CH client integration, generation & execution of ClickHouse database migrations to the Laravel application.
PHP★ 166↓ 35.1K/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
Aurorastation/Aurora.3
The code for Aurorastation's new base, forked from Baystation12.
DM★ 161Jul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
Laravel-Lang/common
Easily connect the necessary language packs to the application
PHP★ 160↓ 258.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-validator
Validation classes for a wide range of domains, and the ability to chain validators to create complex validation criteria
PHP★ 160↓ 1.2M/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
dropbox/pytest-flakefinder
Runs tests multiple times to expose flakiness.
Python★ 158↓ 1.7M/moAug 27, 2026
Custom licenseAug 27, 2026 · metrics 2.10.0
20At Riskhealth index
serilog/serilog-extensions-logging-file
Add file logging to ASP.NET Core apps in one line of code.
C# · PowerShell★ 158Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
postgrespro/testgres
Testing framework for PostgreSQL and its extensions
Python★ 157↓ 90.7K/moJul 19, 2026
Custom licenseJul 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
j9t/html-minifier-next
Highly effective, super-configurable, well-tested web page minifier (enhanced successor to HTML Minifier)
JavaScript★ 155↓ 171.5K/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
npm
12Criticalhealth index
green-api/whatsapp-api-client-js
This library helps you easily create a javascript application with Whatsapp support
JavaScript★ 154Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
8Criticalhealth index
psinetron/echoes-vault-opencode
Persistent memory plugin for OpenCode. Obsidian-style knowledge base that survives across sessions
TypeScript★ 151↓ 7,788/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ai/check-dts
Unit tests for TypeScript definitions in your JS open source library
JavaScript★ 147↓ 17.3K/moJul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
nalgeon/sqlean.py
Python's sqlite3 + extensions
C · Python★ 146Jul 21, 2026
ZlibJul 21, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
pgcodekeeper/pgcodekeeper
Eclipse plugin for database schema management
Java★ 146Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
antigenomics/vdjtools
Analysis of immune repertoire sequencing results
Python★ 145Jul 30, 2026
GPL-3.0Jul 30, 2026 · metrics 2.10.0
9Criticalhealth index
VahidN/DNTCommon.Web.Core
DNTCommon.Web.Core provides common scenarios' solutions for ASP.NET Core applications.
C#★ 142Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
8Criticalhealth index
Taritsyn/BundleTransformer
Bundle Transformer - a modular extension for System.Web.Optimization (also known as the Microsoft ASP.NET Web Optimization Framework).
JavaScript · C#★ 141Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
16Criticalhealth index
VKCOM/icons
Набор SVG иконок, представленный в виде React компонентов.
JavaScript · TypeScript★ 140Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0