Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,685
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,178 recordsRanked by popularity · browse by tag · record statistics
PyPI
9Criticalhealth index
mk-fg/pretty-yaml
PyYAML-based module to produce a bit more pretty and readable YAML-serialized data
Python★ 138↓ 8.2M/moAug 27, 2026
WTFPLAug 27, 2026 · metrics 2.10.0
crates.io
9Criticalhealth index
p4ymak/egui_code_editor
egui Code Editor widget with numbered lines and syntax highlighting..
Rust★ 137↓ 4,198/moAug 16, 2026
MITAug 16, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
php-slack/slack
A simple PHP package for sending messages to Slack, with a focus on ease of use and elegant syntax.
PHP★ 137↓ 146.4K/moAug 5, 2026
BSD-2-ClauseAug 5, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
PrestaShop/hummingbird
Default theme for PrestaShop 9.1+
Smarty · TypeScript · SCSS★ 135↓ 168.2K/moAug 22, 2026
AFL-3.0Aug 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
core-ds/core-components
No repository description published.
TypeScript · MDX · CSS★ 134↓ 58.4K/moJul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
yiisoft/yii2-twig
Yii 2 Twig extension.
PHP★ 134↓ 22.1K/moSep 6, 2026
BSD-3-ClauseSep 6, 2026 · metrics 2.10.0
Hex
9Criticalhealth index
AlexR2D2/duckdbex
The Library embeds C++ DuckDB database into you Elixir application.
C++★ 131↓ 10.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
25At Riskhealth index
SCST-project/scst
SCST is a SCSI target software stack that allows to export any block device or file via iSCSI, FC or RDMA (SRP).
C★ 130Jul 20, 2026
No licenseJul 20, 2026 · metrics 2.10.0
Go
28At Riskhealth index
cherts/pgscv
pgSCV is a PostgreSQL ecosystem metrics collector
Go★ 130Jul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
yiisoft/yii2-jui
Yii 2 JQuery UI extension.
PHP★ 129↓ 148.2K/moSep 5, 2026
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phptg/bot-api
PHP library to interact with Telegram Bot API
PHP★ 128↓ 2,843/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
colorjs/color-name
A JSON with CSS color names
JavaScript★ 126↓ 1.4B/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
romis2012/python-socks
Core proxy client (SOCKS4, SOCKS5, HTTP) functionality for Python
Python★ 125Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
31At Riskhealth index
PeculiarVentures/pkcs11js
A Node.js implementation of the PKCS#11 2.40 interface
C++ · C · JavaScript★ 123↓ 173.3K/moAug 30, 2026
MITAug 30, 2026 · metrics 2.10.0
RubyGems
17Criticalhealth index
ahoward/systemu
univeral capture of stdout and stderr and handling of child process pid for windows, *nix, etc.
Ruby★ 123Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/cli
Lets make documentation on YFM
TypeScript★ 123↓ 25.5K/moJul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
Hex
34At Riskhealth index
elixir-waffle/waffle_ecto
Waffle.Ecto provides an integration with Waffle and Ecto
Elixir★ 123↓ 42.9K/moAug 17, 2026
No licenseAug 17, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/active-record
Active Record pattern implementation
PHP★ 120↓ 6,075/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/json-schema-generator
Provides the ability to generate JSON schemas from Data Transfer Object (DTO) classes
PHP★ 117↓ 11K/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
10Criticalhealth index
lapaygroup/RussianPost
SDK для работы с API Почты России (pochta.ru)
PHP★ 115↓ 2,523/moAug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
RubyGems
34At Riskhealth index
anycable/graphql-anycable
A drop-in replacement for GraphQL ActionCable subscriptions. Works with AnyCable.
Ruby★ 114Aug 10, 2026
MITAug 10, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
dev-petrov/pytest-lazy-fixtures
Allows you to use fixtures in @pytest.mark.parametrize.
Python★ 113↓ 2.1M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-faker
Yii 2 Faker extension
PHP★ 111↓ 191.1K/moAug 1, 2026
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
Go
8Criticalhealth index
Keivan-sf/Bushuray-tui
An Xray TUI client for Linux
Go★ 110Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
aVadim483/fast-excel-reader
Lightweight and very fast XLSX Excel Spreadsheet and CSV Reader in PHP
PHP★ 105↓ 47.2K/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Go
34At Riskhealth index
Kong/kong-operator
Kubernetes Operator for Kong Gateways
Go★ 104Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/KDFs
Collection of Key Derivation Functions written in pure Rust
Rust★ 104↓ 19.1M/moAug 8, 2026
No licenseAug 8, 2026 · metrics 2.10.0
Hex
20At Riskhealth index
balance-platform/pillar
Elixir library client for work with ClickHouse
Elixir★ 104↓ 6,952/moJul 20, 2026
No licenseJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
wkillerud/some-sass
Language server with improved support for SCSS, Sass indented and SassDoc. Workspace awareness and full support for Sass modules.
TypeScript★ 104↓ 5,685/moJul 29, 2026
No licenseJul 29, 2026 · metrics 2.10.0