Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,376
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,889 recordsRanked by popularity · browse by tag · record statistics
Packagist · PyPI
34At Riskhealth index
aVadim483/fast-excel-writer
Lightweight and very fast XLSX Excel Spreadsheet Writer in PHP. Supports full XLSX-file functionality - cell formatting, formulas, styles, charts, etc.
PHP★ 310↓ 86.8K/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go · npm · RubyGems
34At Riskhealth index
werf/trdl
The universal solution for delivering your software updates securely from a trusted The Update Framework (TUF) repository.
Go★ 308Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
shetabit/multipay
simple PHP payment package , supports multiple drivers
PHP★ 302↓ 15.8K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
PeculiarVentures/ASN1.js
ASN1js is a pure JavaScript library implementing a full ASN.1 BER decoder and encoder.
TypeScript★ 300↓ 63.1M/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
premailer/css_parser
Ruby CSS Parser
Ruby★ 299Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
6Criticalhealth index
floatdrop/require-from-string
Load module from string
JavaScript★ 298↓ 479M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
microsoft/vscode-cordova
A Visual Studio Code extension providing intellisense, debug, and build support for Cordova and Ionic projects.
TypeScript★ 297Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
carbon-design-system/carbon-for-ibm-dotcom
Carbon for IBM.com is based on the Carbon Design System for IBM
TypeScript · JavaScript · HTML★ 294↓ 29.3K/moSep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm · PyPI
32At Riskhealth index
rzk-lang/rzk
An experimental proof assistant based on a type theory for synthetic ∞-categories.
Haskell★ 293Sep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
Calabonga/Microservice-Template
Templates for microservice architecture. Nimble Microservice Framework contains two modules. The first with OpenIddict and the second without OpenIddict. Templates are built on ASP.NET Core platform with different versions Core3.1, NET6, NET7 and NET8. You can create a new project extremely fast: in Visual Studio, Rider, dotnet CLI.
C#★ 287Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
8Criticalhealth index
Rirusha/Cassette
Read-only mirror of https://gitlab.gnome.org/Rirusha/Cassette
Vala★ 287Sep 15, 2026
GPL-3.0Sep 15, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
FirelyTeam/spark
Firely and Incendi's open source FHIR server
C#★ 284Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
—
28At Riskhealth index
fsharp/fsharp-compiler-docs
Doc build for FSharp.Compiler.Service
F#★ 280Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
34At Riskhealth index
VenusProtocol/venus-protocol
BNB Smart Chain Venus Protocol
TypeScript · Solidity★ 277↓ 10.5K/moSep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
VahidN/DNTPersianUtils.Core
DNTPersianUtils.Core is a collection of Persian helper extension methods
C#★ 276Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
NuGet
14Criticalhealth index
edwardgushchin/SDL3-CS
Modern C# bindings and native NuGet packages for SDL3 and its companion libraries.
C#★ 276Sep 14, 2026
ZlibSep 14, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
dodobrands/WebAuthn.Net
WebAuthn (Passkeys) library for .NET.
C#★ 273Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
mbk-dev/okama
Investment portfolio and stocks analyzing tools for Python with free historical data
Python★ 273↓ 993/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
reactiveui/ReactiveUI.Validation
Reactive validation for ReactiveUI view models. Declare validation rules as observables over properties and bind the results to views on any supported .NET platform.
C#★ 273Oct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
npm
34At Riskhealth index
radix-ng/primitives
Headless, signals-first UI primitives for Angular. Accessible. Customizable.
TypeScript★ 270↓ 5,840/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
10Criticalhealth index
Chi-teck/drupal-code-generator
A code generator for Drupal.
PHP★ 268↓ 1.1M/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
openpmix/openpmix
OpenPMIx Project Repository
C★ 268Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
PyPI
7Criticalhealth index
emmetio/sublime-text-plugin
The essential toolkit for web-developers
Python★ 265Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
input-output-hk/rust-byron-cardano
rust client libraries to deal with the current cardano mainnet (byron / cardano-sl)
Rust · C★ 265Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Packagist · npm
34At Riskhealth index
neos/neos-ui
Neos CMS UI written in ReactJS with Immutable data structures.
TypeScript · JavaScript · PHP★ 265↓ 19.5K/moOct 21, 2026
GPL-3.0Oct 21, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
VahidN/DNTCaptcha.Core
DNTCaptcha.Core is a captcha generator and validator for ASP.NET Core applications
SCSS · HTML · JavaScript★ 264Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
RubyGems · npm
34At Riskhealth index
ruby-grape/grape-swagger-rails
Swagger UI as Rails Engine for grape-swagger gem.
Ruby · JavaScript · TypeScript★ 261Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-apidoc
API documentation generator
HTML · PHP★ 260↓ 4,139/moSep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
PyPI
15Criticalhealth index
dapper91/pydantic-xml
python xml for humans
Python★ 258↓ 2.5M/moOct 18, 2026
UnlicenseOct 18, 2026 · metrics 2.10.0