Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,509
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,926 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At Riskhealth index
modern-python/lite-bootstrap
Lightweight bootstrap for production-ready Python microservices
Python★ 13↓ 2,157/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
PyPI · crates.io
13Criticalhealth index
monosans/mkdocs-minify-html-plugin
MkDocs plugin for minification using minify-html, an extremely fast and smart HTML + JS + CSS minifier.
Rust · Python★ 13↓ 20K/moOct 3, 2026
MITOct 3, 2026 · metrics 2.10.0
npm
10Criticalhealth index
mopsicus/shardy
Framework for online games and applications on Node.js
TypeScript · JavaScript★ 13↓ 412/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
8Criticalhealth index
neputevshina/nanowarp
a high-quality audio time stretching algorithm
Go · C★ 13Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
15Criticalhealth index
pantheon-systems/wordpress-composer
WordPress for Pantheon with a composer.json file.
PHP · JavaScript · CSS★ 13↓ 1,080/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
—
6Criticalhealth index
qizhoumeng/SQLReport
根据SQL自动生成报表并发送邮件
Python★ 13Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
Hex
34At Riskhealth index
rabbitmq/credentials-obfuscation
Tiny library/OTP app for credential obfuscation
Erlang★ 13↓ 390.6K/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
npm · Go
28At Riskhealth index
sb0rka/sb0rka
No repository description published.
TypeScript · Go★ 13↓ 32/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/cache-file
Yii Cache Library - File Handler
PHP★ 13↓ 12.7K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/mailer-symfony
Yii Framework Symfony Mailer Integration
PHP★ 13↓ 6,465/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/translator-message-php
Yii i18n PHP message storage
PHP★ 13↓ 22.2K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
10Criticalhealth index
DjonnyX/ng-virtual-list
Multifunctional high-performance lists for Angular
TypeScript★ 12↓ 2,347/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
19Criticalhealth index
InterNetX/js-domainrobot-sdk
A javascript package for easy integration of the Domainrobot API powered by InterNetX GmbH.
JavaScript★ 12↓ 1,598/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
13Criticalhealth index
ghettovoice/abnf
Package abnf generates parsers from ABNF grammar (RFC 5234, RFC 7405).
Go★ 12Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
32At Riskhealth index
goreflect/gostructor
Go configurator structures library
Go★ 12Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
12Criticalhealth index
mazixs/n8n-node-converter-documents
n8n community node that converts various document formats into structured JSON or text for AI agents and workflows.
TypeScript · Rich Text Format · HTML★ 12↓ 1,658/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
sputnik8/atol-rb
ATOL KaaS client for Ruby
Ruby★ 12Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist · npm
8Criticalhealth index
zoonru/rialto
Manage Node resources with PHP
PHP · JavaScript★ 12↓ 22.2K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
Calabonga/Calabonga.AspNetCore.AppDefinitions
Application Definitions base classes. The small but very helpful packege that can help you to organize your ASP.NET Core application.
C#★ 11Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
—
34At Riskhealth index
ClickHouse/NuRaft
C++ implementation of Raft core logic as a replication library
C++★ 11Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
9Criticalhealth index
VKCOM/statshouse-go
StatsHouse client library for Go
Go★ 11Sep 19, 2026
MPL-2.0Sep 19, 2026 · metrics 2.10.0
Go
6Criticalhealth index
amodemoli/fastic
Fastic is web framewok, powered by fasthttp and golang.
Go★ 11Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Maven
11Criticalhealth index
appKODE/build-publish-plugin
Gradle plugin for Android that automates build publishing: consistent artifact naming + changelog/release notes generation, and variant-aware uploads to Firebase App Distribution, Confluence, Telegram, Slack and more
Kotlin★ 11Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
8Criticalhealth index
dasp-rs/dasp-rs
DASP-RS is a crate for digital signal processing, speech processing, music analysis, and phonetics.
Rust★ 11↓ 43/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/translation
generate xlf and skeleton for translation and assemble markdown out of xlf and skeleton
TypeScript · JavaScript★ 11↓ 8,011/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
12Criticalhealth index
kozmod/oniontx
The library for maintaining persistence logic on the application layer (via clean/onion/hex arch approach).
Go★ 11Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-psr7bridge
PSR-7 <-> laminas-http message conversions
PHP★ 11↓ 74.2K/moSep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
Go
7Criticalhealth index
lasiar/canonicalheader
Golang linter checking the canonicality of the http header
Go★ 11Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
logux/actions
Types and action creators for build-in Logux actions
TypeScript · JavaScript★ 11↓ 13.7K/moOct 3, 2026
MITOct 3, 2026 · metrics 2.10.0
npm
34At Riskhealth index
logux/oxc-configs
Oxlint & oxfmt shareable config for Logux
JavaScript★ 11↓ 4,636/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0