Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,777
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,156 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At Riskhealth index
yiisoft/files
Useful methods to manage files and directories
PHP★ 37↓ 49K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/factory
Object factory that is able to resolve dependencies from PSR-11 container
PHP★ 36↓ 20.6K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Go
8Criticalhealth index
cnaize/meds
Meds — Hybrid firewall using public blocklists
Go★ 35Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
Go
8Criticalhealth index
freislot/kiri
Minimalist & smart Go-based TUI assistant for plant care. Tracks watering schedules locally with SQLite, syncs with Open-Meteo API, and supports status bar integrations.
Go★ 35Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
idlesign/deflacue
Cue Sheet driven FLAC audio splitter
Python★ 35Aug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
Go
32At Riskhealth index
kovidgoyal/imaging
Go library for dealing with images, colorspaces, metadata, simple transforms
Go★ 35Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-router
Flexible routing for PSR-7 applications
PHP★ 35↓ 629.6K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
allure-framework/allure-php-api
PHP API for Allure Framework
PHP★ 34↓ 47.9K/moAug 10, 2026
Apache-2.0Aug 10, 2026 · metrics 2.10.0
npm
34At Riskhealth index
tenphi/tasty
A deterministic styling engine for stateful component systems.
TypeScript★ 34↓ 7,394/moJul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/config
Configuration management
PHP★ 34↓ 18.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
yiisoft/hydrator
Create and populate objects with type casting, mapping and dependencies resolving support.
PHP★ 34↓ 14.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
NuGet
9Criticalhealth index
Calabonga/UnitOfWork
UnitOfWork pattern implementation for ASP.NET Core
C#★ 33Sep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
npm
6Criticalhealth index
PookiePepelsss/MultiRoblox-RAM
An open-source program that allows you to easily manage you're roblox accounts
Rust · JavaScript · HTML★ 33Aug 2, 2026
Custom licenseAug 2, 2026 · metrics 2.10.0
npm
17Criticalhealth index
alfa-laboratory/alfa-ui-primitives
Alfa-Bank UI primitives for sharing between platforms
JavaScript · Shell★ 33↓ 1,764/moJul 20, 2026
No licenseJul 20, 2026 · metrics 2.10.0
NuGet
7Criticalhealth index
kavenegar/kavenegar-dotnet
Kavenegar API Client Writen In C#
C#★ 33Sep 6, 2026
No licenseSep 6, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
ReactiveBIM/RxBim
No repository description published.
C#★ 32Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
fizyk/port-for
`port-for` is a command-line utility and a python library that helps with local TCP ports managment. `port-for <foo>` script finds an unused port and associates it with `<foo>`. Subsequent calls will return the same port number.
Python★ 32↓ 8.2M/moAug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/db-migration
The package implementing migration for yiisoft/db.
PHP★ 32↓ 6,978/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii-debug
Yii debug panel extension
PHP★ 32↓ 5,908/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
caiges/Ruby-RC4
Implementation of the RC4 algorithm.
Ruby★ 31Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/access
Access checking abstraction
PHP★ 31↓ 13K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/db-sqlite
SQLite driver for Yii Database
PHP★ 31↓ 10.2K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm · Maven
30At Riskhealth index
bugfender/rn-bugfender
Bugfender for React Native
TypeScript · Java · Objective-C++★ 30↓ 2,576/moAug 27, 2026
Apache-2.0Aug 27, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-modulemanager
Modular application system for laminas-mvc applications
PHP★ 30↓ 683.4K/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/cli
RoadRunner binary download utility.
PHP★ 30↓ 615.8K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist · npm
31At Riskhealth index
TheDragonCode/codestyler
A tool to automatically fix PHP Coding Standards issues by Dragon Code.
PHP★ 29↓ 31.2K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
dy/xhtm
XHTM − eXtended Hyperscript Tagged Markup
JavaScript★ 29↓ 11.1K/moSep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/http
Handy HTTP utility such as method constants and status codes
PHP★ 29↓ 30.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/json
JSON encoding and decoding
PHP★ 29↓ 39.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
13Criticalhealth index
JackUait/blok
The best open-source alternative to Notion
TypeScript★ 28↓ 1,004/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0