Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,252
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,887 recordsRanked by popularity · browse by tag · record statistics
npm
24At Riskhealth index
novasamatech/subquery-staking
No repository description published.
TypeScript★ 0Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
12Criticalhealth index
novinvision/inertia-bootstrap-forms
Create bootstrap forms with inertia and twitter bootstrap
Vue · JavaScript · SCSS★ 0↓ 600/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
7Criticalhealth index
nradchenko/go-wim
A pure-Go Windows Imaging (.wim) writer and WIM-variant LZX codec
Go★ 0Oct 12, 2026
MITOct 12, 2026 · metrics 2.10.0
Go · npm
6Criticalhealth index
omahs/oracle-node
No repository description published.
Go★ 0Oct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
omnicajs/eslint-plugin-dependencies
ESLint plugin for sorting and structuring import and export declarations.
TypeScript★ 0↓ 9,436/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
10Criticalhealth index
osmoview/systemctl
access to systemctl commands
Go★ 0Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Go · npm
5Criticalhealth index
ozonpharm/zebra
No repository description published.
Go · Vue★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
16Criticalhealth index
pavelthq/phpgrep
Syntax-aware grep for PHP code.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/exception
[READ ONLY] Subtree split of the phplrt exception component (see phplrt/phplrt)
PHP★ 0↓ 7,360/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/lexer-builder
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
PHP★ 0↓ 4,345/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/parser-builder
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
PHP★ 0↓ 2,839/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/parser-contracts
[READ ONLY] Subtree split of the phplrt parser contracts component (see phplrt/phplrt)
PHP★ 0↓ 7,357/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position
[READ ONLY] Subtree split of the phplrt position component (see phplrt/phplrt)
PHP★ 0↓ 2,183/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position-contracts
[READ ONLY] Subtree split of the phplrt position contracts component (see phplrt/phplrt)
PHP★ 0↓ 2,018/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position-factory-contracts
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
PHP★ 0↓ 4,429/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/source
[READ ONLY] Subtree split of the phplrt source component (see phplrt/phplrt)
PHP★ 0↓ 8,246/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/source-contracts
[READ ONLY] Subtree split of the phplrt source contracts component (see phplrt/phplrt)
PHP★ 0↓ 11.6K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/source-factory-contracts
[READ ONLY] Subtree split of the phplrt source factory contracts component (see phplrt/phplrt)
PHP★ 0↓ 4,619/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Maven · Go · npm +2
30At Riskhealth index
pittengermdp/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
C++ · Rust★ 0Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
28At Riskhealth index
plesk/eslint-config
ESLint configuration for Plesk projects
JavaScript★ 0↓ 1,022/moSep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
Go
5Criticalhealth index
podvoyskiy/fuzzymatch
Fuzzy Matching Library for Go
Go★ 0Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
19Criticalhealth index
poooi/plugin-translator
Translate package into English
TypeScript★ 0↓ 354/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
puzzle/graphiti-openapi
OpenAPI 3.0 specification for your (Graphiti) JSON:API
Ruby★ 0Sep 30, 2026
MITSep 30, 2026 · metrics 2.10.0
npm
4Criticalhealth index
qatrehai/persian-normalize
Normalize Persian and Arabic-script text — ZWNJ, Arabic yeh/kaf, three digit sets, diacritics. Zero dependencies, TypeScript types.
JavaScript★ 0↓ 211.8K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Packagist · npm
11Criticalhealth index
rasuvaeff/property-testing
Property-based testing for PHP as a Testo plugin: random generators, shrinking to minimal counterexamples, reproducible seeds
PHP★ 0↓ 104/moSep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
Packagist · npm
12Criticalhealth index
rasuvaeff/property-testing-core
Framework-agnostic property-based testing engine: generators, shrinking, runner, regression corpus, events
PHP★ 0↓ 5,759/moOct 20, 2026
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Packagist
9Criticalhealth index
rasuvaeff/rector-named-literals
Rector rule that adds parameter names to literal arguments (bool by default, numeric/string opt-in)
PHP★ 0↓ 10.2K/moSep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Packagist · npm
12Criticalhealth index
rasuvaeff/understudy
Test doubles for PHP 8.3–8.5 with a call-closure API, matchers, expectations, sequences, verification, and Testo/PHPUnit/Psalm/PHPStan adapters.
PHP★ 0↓ 3,412/moOct 21, 2026
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0