Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,595
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,802 recordsRanked by popularity · browse by tag · record statistics
Go
11Criticalhealth index
malikhan-dev/zenql
An Integrated Query Language For Go. Compiled, Type-Safe And Fast. (Pure go)
Go★ 54Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
Java★ 54Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
chython/chython
Library for processing molecules and reactions in python way
Python · Cython★ 53Sep 17, 2026
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
Hex
28At Riskhealth index
cyteon/discord_gleam
A library to create discord bots in gleam
Gleam★ 53↓ 378/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
crates.io · npm · Go +1
14Criticalhealth index
ekhodzitsky/gigastt
Local STT server powered by GigaAM v3.
Rust · Python★ 53↓ 661/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
Mahdy-Ahmadi/rubka
rubika robot library rubka for bots
Python★ 51↓ 4,198/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
npm
31At Riskhealth index
plumelo/rollup-plugin-styler
🎨 Universal Rollup plugin for styles: PostCSS, Sass, Less, Stylus and more.
TypeScript · JavaScript★ 51↓ 215.7K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
taiga-family/editor
Tiptap and Taiga UI
HTML · TypeScript★ 51↓ 4,799/moOct 15, 2026
Apache-2.0Oct 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ytsaurus/ytsaurus-ui
Web interface for YTsaurus.
TypeScript · JavaScript★ 51↓ 9,961/moOct 7, 2026
Custom licenseOct 7, 2026 · metrics 2.10.0
npm
34At Riskhealth index
salute-developers/plasma
Salute Design System
TypeScript · MDX★ 50↓ 378.1K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Borodin/typescript-telegram-bot-api
Telegram Bot API wrapper for Node.js written in TypeScript
TypeScript★ 49↓ 16.4K/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
34At Riskhealth index
essentialkaos/ek
Auxiliary packages for Go
Go★ 49Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
3Criticalhealth index
norksec/usbwatchdog
usbWatchdog - monitor changes to your usb ports, and if anything is plugged in or removed, wipe RAM and shut down.
Python★ 49Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/friendly-exception
An interface for an exception to be friendly
PHP★ 49↓ 76.2K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/strings
String helper methods and an inflector
PHP★ 49↓ 86.6K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-symfonymailer
Yii 2 Symfony mailer extension.
PHP★ 49↓ 191.3K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JBZoo/Mermaid-PHP
Generate diagrams and flowcharts with the help of the mermaid script language
PHP★ 48↓ 59.3K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
29At Riskhealth index
quasilyte/gogrep
Syntax-aware Go code search, based on the mvdan/gogrep
Go★ 47Sep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
Go
8Criticalhealth index
sashamelentyev/usestdlibvars
A linter that detect the possibility to use variables/constants from the Go standard library.
Go★ 47Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/form
The package helps with implementing data entry forms
PHP★ 47↓ 11.9K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
8Criticalhealth index
zhichkin/dajet-metadata
Библиотека для чтения метаданных 1С:Предприятие 8 из баз данных Microsoft SQL Server и PostgreSQL.
C#★ 47Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
OpenIdentityPlatform/OpenICF
OpenICF is an open-source identity connector framework that integrates identity management systems with various resources. It enables secure provisioning, synchronization, and management of user accounts across diverse platforms and applications.
Java · Groovy★ 46Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
24At Riskhealth index
catenacyber/perfsprint
Golang linter to use strconv
Go★ 46Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/cache
PSR-16 compatible cache library
PHP★ 46↓ 30.9K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/data
Generic data abstractions: reading, writing, processing.
PHP★ 46↓ 17.2K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go
34At Riskhealth index
AlekSi/hardcache
Tool for managing the Go build cache
Go★ 45Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
NuGet
31At Riskhealth index
Geeksltd/Olive
Olive framework, for more productive cross platform .NET solutions. It's available under the GPL v3 license. See License.md for more information.
C#★ 45Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
34At Riskhealth index
PeculiarVentures/asn1-schema
asn1-schema is a collection of TypeScript schemas that make working with common ASN.1 objects easy
TypeScript★ 45↓ 219M/moSep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
cube-js/cube-ui-kit
UI Framework for Cube Projects. Based on React Aria and tasty style engine.
TypeScript · MDX★ 45↓ 75.3K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0