Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,266
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
270 recordsRanked by popularity · browse by tag · record statistics
NuGet
18Criticalhealth index
JeremyVm/QuestPDF.HTML
HTMLToQPDF is an extension for QuestPDF that allows to generate PDF from HTML
C#★ 15Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
17Criticalhealth index
quasilyte/regex
Regular expression libraries for Go
Go★ 15Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
8Criticalhealth index
masihgh/iranian-bank-list-js
A Javascript library to identify Iranian banks based on card numbers (first 6 digits) and IBANs. It also includes utility functions to validate card numbers and IBANs using standard algorithms.
JavaScript★ 14↓ 350/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
oroinc/customer-portal
OroCommerce package with customer portal and non authenticated visitor website base features.
PHP★ 14↓ 3,766/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/logger
[READ ONLY] LogFactory and global log listeners. Subtree split of the Spiral Logger component (see spiral/framework)
PHP★ 14↓ 750.4K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
10Criticalhealth index
txix-open/isp-kit
No repository description published.
Go★ 14Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
10Criticalhealth index
mopsicus/shardy
Framework for online games and applications on Node.js
TypeScript · JavaScript★ 13↓ 412/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
8Criticalhealth index
neputevshina/nanowarp
a high-quality audio time stretching algorithm
Go · C★ 13Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
Calabonga/Calabonga.AspNetCore.AppDefinitions
Application Definitions base classes. The small but very helpful packege that can help you to organize your ASP.NET Core application.
C#★ 11Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
12Criticalhealth index
kozmod/oniontx
The library for maintaining persistence logic on the application layer (via clean/onion/hex arch approach).
Go★ 11Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
pachca/openapi
OpenAPI spec, SDKs (TypeScript, Python, Go, Kotlin, Swift, C#), CLI, n8n node, and AI agent skills (MCP-ready) for Pachca API
TypeScript★ 11↓ 2,231/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Go
34At Riskhealth index
anyproto/any-ns-node
dRPC node for Any Naming System
Go★ 10Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
34At Riskhealth index
nspcc-dev/neofs-s3-gw
NeoFS S3 Protocol Gateway
Go★ 9Oct 18, 2026
AGPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
34At Riskhealth index
opentalon/opentalon
Open-source enterprise AI orchestration — built in Go to solve real enterprise problems, not toy demos.
Go★ 8Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
AlwxSin/noinlineerr
🚫 Go linter that forbids inline error handling (if err := ...) — because your function deserves more attention.
Go★ 7Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
—
14Criticalhealth index
dionisiydk/StateSpecs
Object validation framework based on first class specs
Smalltalk★ 7Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
7Criticalhealth index
erfjab/eGoBot
make Telegram bot development faster, simpler, and at the same time more professional
Go★ 7Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
neos/neos-ui-compiled
Compiled JavaScript assets of the neos-ui repository (Auto-Generated)
Mixed★ 7↓ 19.5K/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
spiral/testing
Spiral Framework testing SDK
PHP★ 7↓ 110.2K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
34At Riskhealth index
sshaplygin/docs-code
Official documents codes validation and generation in Go
Go★ 7Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
5Criticalhealth index
mayakovskiyy/engraulis
A monitoring microservice written in Go
Go★ 6Oct 19, 2026
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/security
[READ ONLY] RBAC security layer based on NIST definition, role/rule/permission associations, bulletproof. Subtree split of the Spiral Security component (see spiral/framework)
PHP★ 6↓ 698.3K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
31At Riskhealth index
wert-io/widget-initializer
Public NPM library for Wert partners to integrate. Also published to https://javascript.wert.io
JavaScript · TypeScript★ 6↓ 22.6K/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
bootique/bootique-jdbc
JDBC DataSource integration with Bootique
Java★ 5Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
31At Riskhealth index
gravity-ui/playwright-tools
No repository description published.
TypeScript★ 5↓ 13.1K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
npm · Maven
34At Riskhealth index
mindbox-cloud/react-native-sdk
No repository description published.
TypeScript · Kotlin · Swift★ 5↓ 2,199/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
spiral/files
[READ ONLY] File Toolkit: atomic file manager, virtual file streams. Subtree split of the Spiral Files component (see spiral/framework)
PHP★ 5↓ 29.9K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/pagination
[READ ONLY] Common pagination interfaces. Subtree split of the Spiral Pagination component (see spiral/framework)
PHP★ 5↓ 33.4K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
Laravel-Lang/status-generator
Translation status generator for Laravel Lang projects.
PHP★ 4↓ 17.6K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
hanzoai/ai
Hanzo AI — LLM control plane, RAG, and model hub. Native Go routing for 66+ models over an OpenAI-compatible /v1 API; mounts as the 'ai' subsystem inside hanzoai/cloud.
Go★ 4Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0