Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,739
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,221 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At Riskhealth index
spiral/logger
[READ ONLY] LogFactory and global log listeners. Subtree split of the Spiral Logger component (see spiral/framework)
PHP★ 14↓ 505.8K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Go
10Criticalhealth index
txix-open/isp-kit
No repository description published.
Go★ 14Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/data-db
Database adapter for data interfaces
PHP★ 14↓ 2,119/moJul 31, 2026
BSD-3-ClauseJul 31, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
PHP★ 14↓ 9,483/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
yiisoft/translator-message-php
Yii i18n PHP message storage
PHP★ 14↓ 16.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
2Criticalhealth index
Duzopy/VRChat-Crasher
VRChat Crasher
ShaderLab · GLSL★ 13Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
anyrun/anyrun-sdk
Simplify integration with ANY.RUN REST API services
Python★ 13↓ 22.5K/moAug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
npm
34At Riskhealth index
dy/tst
Tests without efforts
JavaScript★ 13↓ 14.6K/moJul 31, 2026
Custom licenseJul 31, 2026 · metrics 2.10.0
Go
24At Riskhealth index
hossein1376/kamune
Communication over untrusted networks
Go · Svelte★ 13Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
npm
6Criticalhealth index
mopsicus/shardy
Framework for online games and applications on Node.js
TypeScript★ 13↓ 26/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
16Criticalhealth index
pantheon-systems/wordpress-composer
WordPress for Pantheon with a composer.json file.
PHP · JavaScript · CSS★ 13↓ 2,124/moAug 6, 2026
Custom licenseAug 6, 2026 · metrics 2.10.0
npm
18Criticalhealth index
script-heads/stage-ui
Flexible UI Framework declared by your own Design System
TypeScript★ 13↓ 8,176/moSep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/cache-file
Yii Cache Library - File Handler
PHP★ 13↓ 7,843/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/mailer-symfony
Yii Framework Symfony Mailer Integration
PHP★ 13↓ 3,097/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
10Criticalhealth index
DjonnyX/ng-virtual-list
Multifunctional high-performance lists for Angular
TypeScript★ 12↓ 8,054/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
npm
19Criticalhealth index
InterNetX/js-domainrobot-sdk
A javascript package for easy integration of the Domainrobot API powered by InterNetX GmbH.
JavaScript★ 12↓ 2,944/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
crates.io
8Criticalhealth index
estin/geosuggest
suggest by name or find nearest by coordinates cities
Rust★ 12↓ 8,305/moAug 6, 2026
MITAug 6, 2026 · metrics 2.10.0
Go
13Criticalhealth index
ghettovoice/abnf
Package abnf generates parsers from ABNF grammar (RFC 5234, RFC 7405).
Go★ 12Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
Go
30At Riskhealth index
goreflect/go_structor
Go configurator structures library
Go★ 12Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
Go
31At Riskhealth index
goreflect/gostructor
Go configurator structures library
Go★ 12Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
kamune-org/kamune
Communication over untrusted networks
Go · Svelte★ 12Jul 15, 2026
MITJul 15, 2026 · metrics 2.10.0
Go
24At Riskhealth index
kamune/kamune
Communication over untrusted networks
Go · Svelte★ 12Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
6Criticalhealth index
qizhoumeng/SQLReport
根据SQL自动生成报表并发送邮件
Python★ 12Aug 2, 2026
Apache-2.0Aug 2, 2026 · metrics 2.10.0
RubyGems
24At Riskhealth index
sputnik8/atol-rb
ATOL KaaS client for Ruby
Ruby★ 12Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
NuGet
9Criticalhealth index
Calabonga/Calabonga.AspNetCore.AppDefinitions
Application Definitions base classes. The small but very helpful packege that can help you to organize your ASP.NET Core application.
C#★ 11Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Packagist · npm
19Criticalhealth index
alleyinteractive/wp-curate
WordPress Curation Plugin
PHP · TypeScript★ 11↓ 23.8K/moAug 22, 2026
GPL-2.0Aug 22, 2026 · metrics 2.10.0
Maven
11Criticalhealth index
appKODE/build-publish-plugin
Gradle plugin for Android that automates build publishing: consistent artifact naming + changelog/release notes generation, and variant-aware uploads to Firebase App Distribution, Confluence, Telegram, Slack and more
Kotlin★ 11Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/translation
generate xlf and skeleton for translation and assemble markdown out of xlf and skeleton
TypeScript · JavaScript★ 11↓ 7,604/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-psr7bridge
PSR-7 <-> laminas-http message conversions
PHP★ 11↓ 67.5K/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 2.10.0