Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,780
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,156 recordsRanked by popularity · browse by tag · record statistics
NuGet
13Criticalhealth index
VahidFarahmandian/Jinget
Jinget is a high-performance .NET 8.0 framework built with DDD + CQRS at its core. It's your Swiss Army knife for cutting through boilerplate code and supercharging productivity.
C#★ 58Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
npm
20At Riskhealth index
max-messenger/max-ui
No repository description published.
TypeScript · SCSS★ 58↓ 2,284/moJul 29, 2026
No licenseJul 29, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/html
Handy library to generate HTML
PHP★ 58↓ 28.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
gemini-testing/html-reporter
Html reporter for Testplane (ex-hermione)
TypeScript · JavaScript★ 57↓ 34.3K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
NuGet
24At Riskhealth index
StbSharp/StbTrueTypeSharp
C# port of stb_truetype.h
C#★ 56Aug 8, 2026
No licenseAug 8, 2026 · metrics 2.10.0
npm
29At Riskhealth index
colorjs/color-parse
Color string parser
JavaScript★ 56↓ 11.8M/moAug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
redhuntlabs/antisquat
No repository description published.
Python★ 56Aug 2, 2026
GPL-3.0Aug 2, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/arrays
Yii Array Helper
PHP★ 56↓ 78.4K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/view
Yii view rendering library
PHP★ 56↓ 16.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JBZoo/Composer-Diff
See what packages have changed after `composer update`
PHP★ 55↓ 7,162/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
npm
32At Riskhealth index
PeculiarVentures/xmldsigjs
A TypeScript/JavaScript implementation of XML security standards using Web Crypto API for both browsers and Node.js.
TypeScript★ 55↓ 460.2K/moAug 30, 2026
MITAug 30, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/sponges
Collection of sponge functions written in pure Rust
Rust★ 55↓ 10.5M/moAug 6, 2026
No licenseAug 6, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
nbgrp/onelogin-saml-bundle
OneLogin SAML Symfony Bundle
PHP★ 55↓ 57.7K/moJul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 2.10.0
npm
34At Riskhealth index
anolilab/semantic-release
A multi semantic release tool for monorepos.
TypeScript★ 54↓ 317K/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
chython/chython
Library for processing molecules and reactions in python way
Python★ 54Aug 6, 2026
LGPL-3.0Aug 6, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
Java★ 52Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
Mahdy-Ahmadi/rubka
rubika robot library rubka for bots
Python★ 49↓ 4,198/moAug 8, 2026
Custom licenseAug 8, 2026 · metrics 2.10.0
Go
34At Riskhealth index
essentialkaos/ek
Auxiliary packages for Go
Go★ 49Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
3Criticalhealth index
norksec/usbwatchdog
usbWatchdog - monitor changes to your usb ports, and if anything is plugged in or removed, wipe RAM and shut down.
Python★ 49Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/friendly-exception
An interface for an exception to be friendly
PHP★ 49↓ 74.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/strings
String helper methods and an inflector
PHP★ 49↓ 95.2K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-symfonymailer
Yii 2 Symfony mailer extension.
PHP★ 49↓ 158.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JBZoo/Mermaid-PHP
Generate diagrams and flowcharts with the help of the mermaid script language
PHP★ 48↓ 29.6K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Go · PyPI
15Criticalhealth index
MiXaiLL76/auto_ai_router
High-performance proxy router for LLM APIs with automatic load balancing, rate limiting, and fail2ban protection
Go★ 48Aug 25, 2026
Apache-2.0Aug 25, 2026 · metrics 2.10.0
Go
10Criticalhealth index
malikhan-dev/zenql
An Integrated Query Language For Go. Compiled, Type-Safe And Fast.
Go★ 48Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
Go
24At Riskhealth index
catenacyber/perfsprint
Golang linter to use strconv
Go★ 47Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
29At Riskhealth index
quasilyte/gogrep
Syntax-aware Go code search, based on the mvdan/gogrep
Go★ 47Aug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
Go
8Criticalhealth index
sashamelentyev/usestdlibvars
A linter that detect the possibility to use variables/constants from the Go standard library.
Go★ 47Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/form
The package helps with implementing data entry forms
PHP★ 47↓ 6,484/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0