Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,575
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,219 recordsRanked by popularity · browse by tag · record statistics
NuGet
34At Riskhealth index
WildGums/Orchestra
Orchestra is a composable shell and WPF framework built on top of Catel
C#★ 495Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
voronind/awesome-slugify
Python flexible slugify function
Python★ 492Jul 30, 2026
No licenseJul 30, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
servo/euclid
Geometry primitives (basic linear algebra) for Rust
Rust★ 491↓ 7.6M/moAug 11, 2026
Custom licenseAug 11, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
PHP★ 483↓ 773.2K/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
JavaScript★ 478↓ 79.8M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
NuGet
13Criticalhealth index
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
C# · JavaScript★ 475Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
npm
28At Riskhealth index
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
JavaScript★ 473↓ 67.5M/moAug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-authclient
Yii 2 authclient extension.
PHP★ 471↓ 96.5K/moAug 1, 2026
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
npm
16Criticalhealth index
Netflix-Skunkworks/stethoscope-app
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
JavaScript★ 463Aug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
npm
14Criticalhealth index
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
JavaScript★ 452Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-redis
Yii 2 Redis extension.
PHP★ 449↓ 225.2K/moJul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
Go
20At Riskhealth index
redhuntlabs/BucketLoot
BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets by scanning files that store data in plain-text.
Go★ 446Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
OpenIdentityPlatform/OpenDJ
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
Java★ 435Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-httpclient
Yii 2 HTTP client
PHP★ 430↓ 191K/moAug 1, 2026
BSD-3-ClauseAug 1, 2026 · metrics 2.10.0
PyPI · crates.io
16Criticalhealth index
awolverp/cachebox
The fastest memoizing and caching Python library written in Rust.
Rust · Python★ 428↓ 14.7M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
34At Riskhealth index
Baystation12/Baystation12
Baystation's flavor of Space Station 13
DM★ 425Jul 21, 2026
AGPL-3.0Jul 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-elasticsearch
Yii 2 Elasticsearch extension
PHP★ 425↓ 28.8K/moJul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
PHP★ 423↓ 37.8K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm · Go
15Criticalhealth index
vshulcz/deja-vu
Your agents already solved this. deja finds it — retroactive search and MCP recall over the session logs your coding agents already wrote. Cross-agent, SSH-portable, one zero-dep binary, fully local.
Go★ 419↓ 3,030/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/w3lib
Python library of web-related functions
Python★ 418↓ 8.6M/moAug 19, 2026
BSD-3-ClauseAug 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
temporalio/sdk-php
Temporal PHP SDK
PHP★ 416↓ 255K/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
34At Riskhealth index
ReactiveBayes/RxInfer.jl
Julia package for automated Bayesian inference on a factor graph with reactive message passing
Jupyter Notebook · Julia★ 410Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
coveooss/exponential-backoff
A utility that allows retrying a function with an exponential delay between attempts.
TypeScript★ 406↓ 183M/moAug 4, 2026
Apache-2.0Aug 4, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
appium/dotnet-client
Extension to the official Selenium dotnet webdriver
C#★ 399Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.10.0
npm
18Criticalhealth index
microsoft/setup-msbuild
A GitHub Action to facilitate configuring MSBuild in the workflow PATH for building .NET Framework applications.
TypeScript★ 394Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
Go
13Criticalhealth index
lamoda/gonkey
Gonkey - a testing automation tool
Go★ 393Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
NuGet
6Criticalhealth index
AlexanderPro/WindowTextExtractor
WindowTextExtractor allows you to get a text from any window of an operating system including asterisk passwords
C#★ 391Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
feature-sliced/steiger
Universal file structure and project architecture linter
TypeScript★ 390Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
colorjs/color-space
Open collection of color spaces
JavaScript · HTML★ 382↓ 4M/moAug 27, 2026
CC0-1.0Aug 27, 2026 · metrics 2.10.0