Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,508
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,800 recordsRanked by popularity · browse by tag · record statistics
—
6Criticalhealth index
qizhoumeng/SQLReport
根据SQL自动生成报表并发送邮件
Python★ 13Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Hex
34At Riskhealth index
rabbitmq/credentials-obfuscation
Tiny library/OTP app for credential obfuscation
Erlang★ 13↓ 390.6K/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
npm · Go
28At Riskhealth index
sb0rka/sb0rka
No repository description published.
TypeScript · Go★ 13↓ 32/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/cache-file
Yii Cache Library - File Handler
PHP★ 13↓ 12.7K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/mailer-symfony
Yii Framework Symfony Mailer Integration
PHP★ 13↓ 6,465/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/translator-message-php
Yii i18n PHP message storage
PHP★ 13↓ 22.2K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
10Criticalhealth index
DjonnyX/ng-virtual-list
Multifunctional high-performance lists for Angular
TypeScript★ 12↓ 2,347/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
13Criticalhealth index
ghettovoice/abnf
Package abnf generates parsers from ABNF grammar (RFC 5234, RFC 7405).
Go★ 12Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
32At Riskhealth index
goreflect/gostructor
Go configurator structures library
Go★ 12Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
12Criticalhealth index
mazixs/n8n-node-converter-documents
n8n community node that converts various document formats into structured JSON or text for AI agents and workflows.
TypeScript · Rich Text Format · HTML★ 12↓ 1,658/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
sputnik8/atol-rb
ATOL KaaS client for Ruby
Ruby★ 12Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist · npm
8Criticalhealth index
zoonru/rialto
Manage Node resources with PHP
PHP · JavaScript★ 12↓ 22.2K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
Calabonga/Calabonga.AspNetCore.AppDefinitions
Application Definitions base classes. The small but very helpful packege that can help you to organize your ASP.NET Core application.
C#★ 11Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
—
34At Riskhealth index
ClickHouse/NuRaft
C++ implementation of Raft core logic as a replication library
C++★ 11Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
9Criticalhealth index
VKCOM/statshouse-go
StatsHouse client library for Go
Go★ 11Sep 19, 2026
MPL-2.0Sep 19, 2026 · metrics 2.10.0
Go
6Criticalhealth index
amodemoli/fastic
Fastic is web framewok, powered by fasthttp and golang.
Go★ 11Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Maven
11Criticalhealth index
appKODE/build-publish-plugin
Gradle plugin for Android that automates build publishing: consistent artifact naming + changelog/release notes generation, and variant-aware uploads to Firebase App Distribution, Confluence, Telegram, Slack and more
Kotlin★ 11Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
8Criticalhealth index
dasp-rs/dasp-rs
DASP-RS is a crate for digital signal processing, speech processing, music analysis, and phonetics.
Rust★ 11↓ 43/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/translation
generate xlf and skeleton for translation and assemble markdown out of xlf and skeleton
TypeScript · JavaScript★ 11↓ 8,011/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
12Criticalhealth index
kozmod/oniontx
The library for maintaining persistence logic on the application layer (via clean/onion/hex arch approach).
Go★ 11Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-psr7bridge
PSR-7 <-> laminas-http message conversions
PHP★ 11↓ 74.2K/moSep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
Go
7Criticalhealth index
lasiar/canonicalheader
Golang linter checking the canonicality of the http header
Go★ 11Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
logux/actions
Types and action creators for build-in Logux actions
TypeScript · JavaScript★ 11↓ 13.7K/moOct 3, 2026
MITOct 3, 2026 · metrics 2.10.0
npm
34At Riskhealth index
logux/oxc-configs
Oxlint & oxfmt shareable config for Logux
JavaScript★ 11↓ 4,636/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
34At Riskhealth index
nspcc-dev/neofs-api
NeoFS API documentation and proto files declaration
Makefile★ 11Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
pachca/openapi
OpenAPI spec, SDKs (TypeScript, Python, Go, Kotlin, Swift, C#), CLI, n8n node, and AI agent skills (MCP-ready) for Pachca API
TypeScript★ 11↓ 2,231/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
24At Riskhealth index
responsibleapi/responsible
A small language that compiles to OpenAPI
TypeScript★ 11↓ 137/moSep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/kv
:electric_plug: RoadRunner Key-Value storage SDK
PHP★ 11↓ 303.4K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go · crates.io
8Criticalhealth index
slavkiy/witgo
SDK wasm plugin in golang
Go★ 11Sep 29, 2026
GPL-3.0Sep 29, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
yiisoft/input-http
Provides Yii Hydrator attributes to get data from PSR-7 HTTP request and adds extra abilities to middlewares processed by Yii Middleware Dispatcher.
PHP★ 11↓ 18.9K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0