Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,576
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,789 recordsRanked by popularity · browse by tag · record statistics
Packagist
34At Riskhealth index
aVadim483/fast-excel-templator
Lightweight and very fast Excel Spreadsheet generator from XLSX-templates in PHP
PHP★ 22↓ 9,820/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
30At Riskhealth index
ehmo/gomoufox
Go library, CLI, and MCP server for Camoufox browser automation.
Go★ 22Sep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
npm · Packagist
17Criticalhealth index
javiereguiluz/EasyAdminBundle
The new (and simple) admin generator for Symfony applications.
PHP · Twig★ 22Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
laminas/laminas-mvc-middleware
Dispatch middleware pipelines in place of controllers in laminas-mvc.
PHP★ 22↓ 25.2K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/worker
Base PHP worker for RoadRunner server.
PHP★ 22↓ 771.8K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/error-handler
Framework independent advanced error handler
PHP · CSS★ 22↓ 22.7K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/log-target-file
Yii Logging Library - File Target
PHP★ 22↓ 14.1K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/proxy
General purpose proxy
PHP★ 22↓ 6,023/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
ytsaurus/ytsaurus-spyt
YTsaurus SPYT provides an integration with Apache Spark
Scala · Python★ 22Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
—
6Criticalhealth index
3F/7z.Libs
📦📦 🗜 An automated build of the `7z.Libs` NuGet packages.
Batchfile★ 21Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
34At Riskhealth index
SocketSomeone/cent.js
👀 Javascript library to communicate with Centrifugo HTTP API
TypeScript★ 21↓ 10.1K/moOct 10, 2026
MITOct 10, 2026 · metrics 2.10.0
npm
34At Riskhealth index
SocketSomeone/nestjs-hot-shots
🐶 Hot-shots Module for Nest.js Framework
TypeScript★ 21↓ 59.2K/moOct 9, 2026
MITOct 9, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
VonderVuflya/Yggdrasil
Durable, local-first memory for AI coding agents over MCP — zero-dependency, curated & semantically de-duped, you own the data (SQLite + Markdown). Works with Claude Code, Codex & any MCP host.
Python★ 21↓ 777/moSep 12, 2026
AGPL-3.0Sep 12, 2026 · metrics 2.10.0
crates.io
9Criticalhealth index
dapper91/ext-sort-rs
rust external sort algorithm implementation
Rust★ 21↓ 181.9K/moSep 27, 2026
UnlicenseSep 27, 2026 · metrics 2.10.0
Go
9Criticalhealth index
irdkwmnsb/webrtc-grabber
Grabber application for stealthily peeking at other computer's screens
Go · HTML · JavaScript★ 21Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
sajya/client
JSON-RPC 2.0 HTTP(S) Client
PHP★ 21↓ 9,905/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/assets
Assets management
PHP★ 21↓ 18.8K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/cookies
Convenient way to use cookies with PSR-7
PHP★ 21↓ 25.2K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/var-dumper
Helper for dumping variable for debug purposes
PHP★ 21↓ 47.3K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii-middleware
Yii-specific middleware
PHP★ 21↓ 9,727/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Akurganow/use-persisted-state
React useState hook with persistence to localStorage, sessionStorage, and extension storage (chrome.storage / browser.storage)
TypeScript · JavaScript★ 20↓ 2,193/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Maven
6Criticalhealth index
crashinvaders/gdx-lml
:octocat: LibGDX utility libraries.
Java★ 20Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
20At Riskhealth index
findify/findify-js
Findify monorepo
TypeScript★ 20↓ 5,017/moSep 28, 2026
No licenseSep 28, 2026 · metrics 2.10.0
npm
26At Riskhealth index
gl-vis/regl-scatter2d
Fast and precise scatter plot
JavaScript · GLSL★ 20Oct 25, 2026
MITOct 25, 2026 · metrics 2.10.0
Go
26At Riskhealth index
go-toolsmith/astcopy
Package astcopy implements Go AST deep copy operations.
Go★ 20Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm · Go
11Criticalhealth index
izzzzzi/agent-assh
SSH workflow helper for LLM agents
Go★ 20↓ 72/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
ormeilu/avoid-ai-writing-russian
Скилл для ИИ-агентов и CLI на Python/uv: находит и убирает ИИ-стиль в русских текстах (канцелярит, кальки, штампы), проверяет сохранность правки и оценивает текст по фрагментам в духе «Антиплагиата» с калибровкой по вашим отчётам. Русская адаптация avoid-ai-writing.
Python★ 20↓ 7,274/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
11Criticalhealth index
vadiminshakov/marti
Go trading bot (DCA & AI strategies, crypto, Binance, Bybit)
Go · JavaScript★ 20Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/session
A session service, PSR-15 session middleware, and a flash message service which helps use one-time messages.
PHP★ 20↓ 24.3K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0