Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,755
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,466 recordsRanked by popularity · browse by tag · record statistics
Packagist
32At Riskhealth index
phplrt/parser
[READ ONLY] Subtree split of the phplrt parser component (see phplrt/phplrt)
PHP★ 3↓ 2,846/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Go
19Criticalhealth index
rgst-io/stencil-golang
[MIGRATED] stencil template repository for Golang applications
Go Template · Go★ 3Aug 1, 2026
GPL-3.0Aug 1, 2026 · metrics 2.10.0
PyPI
7Criticalhealth index
rhasspy/rhasspy-asr-vosk-hermes
MQTT service for speech to text with Vosk using Hermes protocol
Python · Shell★ 3Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
11Criticalhealth index
schmooky/pylinka
No repository description published.
TypeScript★ 3↓ 8,841/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
siy/aether
No repository description published.
Java★ 3Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
Packagist
8Criticalhealth index
smarty-php/smarty-phpunit
No repository description published.
PHP · Smarty★ 3↓ 3/moJul 20, 2026
No licenseJul 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
sparcs-kaist/react-grid-layout
react-grid-layout customization for usage in ZABO
JavaScript★ 3↓ 34/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/console
[READ ONLY] Console Core, Auto-Discovery, Command Sequencing. Subtree split of the Spiral Console component (see spiral/framework)
PHP★ 3↓ 2,383/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/http
[READ ONLY] PSR-15 HTTP Request pipeline. Subtree split of the Spiral HTTP component (see spiral/framework)
PHP★ 3↓ 2,154/moJul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
ssst0n3/opdb
an opcode level debugger for python
Python★ 3↓ 9/moSep 8, 2026
Apache-2.0Sep 8, 2026 · metrics 2.10.0
crates.io
9Criticalhealth index
tana/turtly-converter
No repository description published.
Rust★ 3Aug 23, 2026
MPL-2.0Aug 23, 2026 · metrics 2.10.0
14Criticalhealth index
thibaultcha/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
C★ 3Jul 26, 2026
No licenseJul 26, 2026 · metrics 2.10.0
npm
19Criticalhealth index
vLannaAi/noy-db
Zero-knowledge, offline-first, encrypted document store with pluggable backends and multi-user access control
TypeScript★ 3↓ 67.8K/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Go
19Criticalhealth index
vmware/terraform-provider-vcda
Terraform Provider for VMware Cloud Director Availability (Archived)
Go★ 3Jul 18, 2026
MPL-2.0Jul 18, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
vrassouli/Bluent
No repository description published.
CSS · C# · HTML★ 3Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Go
20At Riskhealth index
werf/copy-recurse
Effective recursive file copying
Go★ 3Jul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
weso/pgschemapc
Property graph schemas with Property constraints
Rust★ 3Sep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
whole-tale/girder_wholetale
Girder plugin providing basic Whole Tale functionality
Python★ 3Sep 5, 2026
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
11Criticalhealth index
yaourdt/mongoose-os-action
Github action to build Mongoose OS firmware files using the mos tool and it's integrated build service.
Shell · Dockerfile★ 3Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
yiisoft/code-style
PHP CS Fixer rule sets for Yii packages.
PHP★ 3↓ 11.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
yiisoft/psr-emitter
PSR-7 HTTP response emitter
PHP★ 3↓ 10.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
7Criticalhealth index
1zumiSagiri/mcx
A Typst package for typesetting randomized multiple-choice exams
Typst★ 2Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Go
34At Riskhealth index
AlphaSense-Engineering/privatecloud-cli
AlphaSense Enterprise Intelligence Private Cloud environment management tool
Go★ 2Aug 23, 2026
Custom licenseAug 23, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
Automattic/jetpack-publicize
[READ ONLY] Publicize makes it easy to share your site’s posts on several social media networks automatically when you publish a new post. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 2↓ 1,797/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
24At Riskhealth index
Benson-Genomics-Lab/VNTRseek
VNTRSeek is a computational pipeline for the detection of VNTRs in short read sequencing data. It was developed by Yevgeniy Gelfand, Yozen Hernandez, and Gary Benson, with contributions from Marzie Rasekh, and more recently streamlined by Kyler Anderson in the Benson Lab for Biocomputing and Informatics at Boston University.
C · Perl★ 2Aug 16, 2026
GPL-3.0Aug 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Bluetooth-Devices/async_interrupt
Context manager to raise an exception when a future is done
Python★ 2↓ 1.3M/moAug 8, 2026
Apache-2.0Aug 8, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
CJWorkbench/parquet-to-arrow
Statically-linked tools to help convert Parquet files to Arrow
C++ · Python★ 2Aug 24, 2026
No licenseAug 24, 2026 · metrics 2.10.0