Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,206
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,760 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
omnicajs/eslint-plugin-dependencies
ESLint plugin for sorting and structuring import and export declarations.
TypeScript★ 0↓ 9,436/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
10Criticalhealth index
osmoview/systemctl
access to systemctl commands
Go★ 0Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Go · npm
5Criticalhealth index
ozonpharm/zebra
No repository description published.
Go · Vue★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
16Criticalhealth index
pavelthq/phpgrep
Syntax-aware grep for PHP code.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/exception
[READ ONLY] Subtree split of the phplrt exception component (see phplrt/phplrt)
PHP★ 0↓ 7,360/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/lexer-builder
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
PHP★ 0↓ 4,345/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/parser-builder
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
PHP★ 0↓ 2,839/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/parser-contracts
[READ ONLY] Subtree split of the phplrt parser contracts component (see phplrt/phplrt)
PHP★ 0↓ 7,357/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position
[READ ONLY] Subtree split of the phplrt position component (see phplrt/phplrt)
PHP★ 0↓ 2,183/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position-contracts
[READ ONLY] Subtree split of the phplrt position contracts component (see phplrt/phplrt)
PHP★ 0↓ 2,018/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/position-factory-contracts
[READ ONLY] Subtree split of the phplrt lexer component (see phplrt/phplrt)
PHP★ 0↓ 4,429/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/source
[READ ONLY] Subtree split of the phplrt source component (see phplrt/phplrt)
PHP★ 0↓ 8,246/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/source-contracts
[READ ONLY] Subtree split of the phplrt source contracts component (see phplrt/phplrt)
PHP★ 0↓ 11.6K/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
phplrt/source-factory-contracts
[READ ONLY] Subtree split of the phplrt source factory contracts component (see phplrt/phplrt)
PHP★ 0↓ 4,619/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Maven · Go · npm +2
30At Riskhealth index
pittengermdp/flatbuffers
FlatBuffers: Memory Efficient Serialization Library
C++ · Rust★ 0Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
28At Riskhealth index
plesk/eslint-config
ESLint configuration for Plesk projects
JavaScript★ 0↓ 1,022/moSep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
Go
5Criticalhealth index
podvoyskiy/fuzzymatch
Fuzzy Matching Library for Go
Go★ 0Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
puzzle/graphiti-openapi
OpenAPI 3.0 specification for your (Graphiti) JSON:API
Ruby★ 0Sep 30, 2026
MITSep 30, 2026 · metrics 2.10.0
npm
4Criticalhealth index
qatrehai/persian-normalize
Normalize Persian and Arabic-script text — ZWNJ, Arabic yeh/kaf, three digit sets, diacritics. Zero dependencies, TypeScript types.
JavaScript★ 0↓ 211.8K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Packagist · npm
11Criticalhealth index
rasuvaeff/property-testing
Property-based testing for PHP as a Testo plugin: random generators, shrinking to minimal counterexamples, reproducible seeds
PHP★ 0↓ 104/moSep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
Packagist · npm
12Criticalhealth index
rasuvaeff/property-testing-core
Framework-agnostic property-based testing engine: generators, shrinking, runner, regression corpus, events
PHP★ 0↓ 5,759/moOct 20, 2026
BSD-3-ClauseOct 20, 2026 · metrics 2.10.0
Packagist
9Criticalhealth index
rasuvaeff/rector-named-literals
Rector rule that adds parameter names to literal arguments (bool by default, numeric/string opt-in)
PHP★ 0↓ 10.2K/moSep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Packagist · npm
12Criticalhealth index
rasuvaeff/understudy
Test doubles for PHP 8.3–8.5 with a call-closure API, matchers, expectations, sequences, verification, and Testo/PHPUnit/Psalm/PHPStan adapters.
PHP★ 0↓ 3,412/moOct 21, 2026
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
Packagist
11Criticalhealth index
rasuvaeff/understudy-testo
Testo adapter for the understudy test double library: automatic verification and cleanup after every test
PHP★ 0↓ 2,471/moSep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Go
4Criticalhealth index
reddawnairsoft/api-proto
No repository description published.
Makefile★ 0Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
22At Riskhealth index
rest-mail/go-smtp
📤 An SMTP library for Go clients and servers
Go★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
5Criticalhealth index
rezect/ttl-cache-server
REST API cache service + GitHub client with retry/rate limiting
Go★ 0Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
robintibor/moabb
Mother of All BCI Benchmarks
Python★ 0Sep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0