Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,403
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,788 recordsRanked by popularity · browse by tag · record statistics
npm · Maven
34At Riskhealth index
creevey/creevey
Cross-browser screenshot testing tool for Storybook with fancy UI Runner.
TypeScript★ 433↓ 4,895/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-httpclient
Yii 2 HTTP client
PHP★ 429↓ 218.8K/moSep 15, 2026
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
codeigniter4/shield
Authentication and Authorization for CodeIgniter 4
PHP★ 427↓ 57.4K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
—
34At Riskhealth index
Baystation12/Baystation12
Baystation's flavor of Space Station 13
DM★ 425Sep 12, 2026
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-elasticsearch
Yii 2 Elasticsearch extension
PHP★ 423↓ 27.1K/moSep 14, 2026
BSD-3-ClauseSep 14, 2026 · metrics 2.10.0
npm
34At Riskhealth index
feature-sliced/steiger
Universal file structure and project architecture linter
TypeScript★ 422↓ 676.4K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
temporalio/sdk-php
Temporal PHP SDK
PHP★ 421↓ 286.8K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
scrapy/w3lib
Python library of web-related functions
HTML · Python★ 418↓ 7M/moOct 19, 2026
BSD-3-ClauseOct 19, 2026 · metrics 2.10.0
—
34At Riskhealth index
ReactiveBayes/RxInfer.jl
Julia package for automated Bayesian inference on a factor graph with reactive message passing
Jupyter Notebook · Julia★ 413Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm · Maven · RubyGems
34At Riskhealth index
matinzd/react-native-health-connect
React native library for health connect (Android only)
Kotlin · TypeScript★ 412↓ 472.9K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
appium/dotnet-client
.NET C# bindings for Appium, extending the Selenium .NET library
C#★ 399Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
13Criticalhealth index
lamoda/gonkey
Gonkey - a testing automation tool
Go★ 395Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
NuGet
6Criticalhealth index
AlexanderPro/WindowTextExtractor
WindowTextExtractor allows you to get a text from any window of an operating system including asterisk passwords
C#★ 393Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
colorjs/color-space
Open collection of color spaces
JavaScript · HTML★ 390↓ 3.5M/moOct 24, 2026
CC0-1.0Oct 24, 2026 · metrics 2.10.0
npm
34At Riskhealth index
nanostores/persistent
Smart store for Nano Stores state manager to keep data in localStorage
TypeScript · JavaScript★ 382↓ 434K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm · crates.io · Maven
14Criticalhealth index
AlexGladkov/claude-in-mobile
MCP server for mobile and desktop automation — Android (via ADB), iOS Simulator (via simctl), and Desktop (Compose Multiplatform). Like Claude in Chrome but for mobile devices and desktop apps
TypeScript · Rust★ 380↓ 3,906/moOct 23, 2026
No licenseOct 23, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
bytecodealliance/wasi-rs
WASI bindings for Rust
Rust★ 374↓ 60.4M/moOct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
aio-libs/aiosmtpd
A reimplementation of the Python stdlib smtpd.py based on asyncio.
Python★ 373↓ 1.6M/moOct 24, 2026
Apache-2.0Oct 24, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
gtk-rs/gtk-rs-core
Rust bindings for GNOME libraries
Rust★ 373↓ 17.2M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
19Criticalhealth index
rabbitmq/rabbitmq-management
RabbitMQ Management UI and HTTP API
Erlang · JavaScript · HTML★ 373Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/MACs
Message authentication code algorithms written in pure Rust
Rust★ 372↓ 51.3M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
NuGet
28At Riskhealth index
FontStashSharp/FontStashSharp
C# port of https://github.com/memononen/fontstash
C#★ 370Oct 23, 2026
ZlibOct 23, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
kniEngine/kni
KNI is a cross-platform C# game framework.
C#★ 367Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
PyPI
9Criticalhealth index
vlasovskikh/funcparserlib
Recursive descent parsing library for Python based on functional combinators
Python★ 360↓ 138K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
19Criticalhealth index
phpspec/php-diff
A comprehensive library for generating differences between two strings in multiple formats (unified, side by side HTML etc). Based on the difflib implementation in Python
PHP★ 359↓ 671.9K/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
—
34At Riskhealth index
PackageKit/PackageKit
A D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API.
C · C++★ 354Sep 14, 2026
GPL-2.0Sep 14, 2026 · metrics 2.10.0
npm
34At Riskhealth index
jkroso/parse-duration
convert a human readable duration to ms
JavaScript★ 347↓ 2.9M/moOct 24, 2026
MITOct 24, 2026 · metrics 2.10.0
—
19Criticalhealth index
pawn-lang/compiler
Pawn compiler for SA-MP with bug fixes and new features - runs on Windows, Linux, macOS
C · Assembly★ 342Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
django-webtest/django-webtest
django-webtest provides integration of Ian Bicking's WebTest (http://docs.pylonsproject.org/projects/webtest/) with django's testing framework.
Python★ 336↓ 164.3K/moOct 10, 2026
MITOct 10, 2026 · metrics 2.10.0