Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,579
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,618 recordsRanked by popularity · browse by tag · record statistics
PyPI
34At riskhealth index
exordos/gcl_sdk
SDK for Exordos
Python★ 5↓ 6,483/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
28Criticalhealth index
hugr-lab/query-engine
The Hugr query engine
Go★ 5Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
15Criticalhealth index
joakimk/dboard
Dashboard framework
Ruby★ 5Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
laminas/laminas-i18n-phone-number
Validate and format international phone numbers
PHP★ 5↓ 7,724/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
RubyGems
49At riskhealth index
metanorma/isodoc
Generate HTML/Word from Metanorma XML
Ruby★ 5Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
—
26Criticalhealth index
nrfconnect/sdk-hal_nordic
NCS downstream of https://github.com/zephyrproject-rtos/hal_nordic
C★ 5Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
npm
11Criticalhealth index
pshenmic/dash-platform-sdk
A lightweight Javascript Dash Platform SDK
TypeScript★ 5↓ 2,033/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
11Criticalhealth index
runixer/laplaced
A lightweight, self-hosted Personal AI Daemon written in Go. Features Hybrid RAG (SQLite + Vectors), Long-term Memory, and Voice I/O. Optimized for low-end VPS and Raspberry Pi.
Go★ 5Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Maven
22Criticalhealth index
toronik/env
No repository description published.
Kotlin★ 5Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
19Criticalhealth index
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
Go★ 5Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
JavaScript★ 5↓ 164M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
wooorm/is-decimal
Check if a character is decimal
JavaScript★ 5↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Maven
29Criticalhealth index
1c-syntax/bsl-common-library
Библиотека базовых сущностей bsl, mdo
Java★ 4Jul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-a8c-mc-stats
[READ ONLY] Used to record internal usage stats for Automattic. Not visible to site owners. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 150.8K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-admin-ui
[READ ONLY] Generic Jetpack wp-admin UI elements. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 148.8K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-assets
[READ ONLY] Jetpack Asset Management. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 147.9K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-plugins-installer
[READ ONLY] Handle installation of plugins from WP.org This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 4↓ 1,929/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist · npm
26Criticalhealth index
Automattic/woocommerce-analytics
[READ ONLY] Enhanced analytics for WooCommerce users. This repository is a mirror, for issue tracking and development head to: https://github.com/woocommerce/woocommerce/tree/trunk/packages/php/woocommerce-analytics
PHP★ 4↓ 103.4K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Go
9Criticalhealth index
Behnam-RK/dezhban
Cross-platform network kill switch (Go) — blocks traffic by geo-IP country
Go · Swift★ 4Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm
12Criticalhealth index
Krivega/sip-connector
TypeScript SDK для интеграции WebRTC-приложений с платформой Vinteo через SIP-протокол. Предоставляет высокоуровневый API для создания полнофункциональных видеоконференций.
TypeScript★ 4↓ 2,983/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · PyPI
34At riskhealth index
RamenDR/ramenctl
Command line tool and Go module for managing and troubleshooting Ramen
Go★ 4Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
28Criticalhealth index
SberBusiness/triplex-next
No repository description published.
TypeScript★ 4↓ 2,355/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Hex
20Criticalhealth index
annatel/antl_phonenumber
No repository description published.
Elixir · C++★ 4↓ 5,705/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
22Criticalhealth index
itmo-is-dev/platform
Platform libraries used in itmo-is-dev projects
C#★ 4Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
npm
38At riskhealth index
jridgewell/set-array
No repository description published.
TypeScript · JavaScript★ 4↓ 113M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
—
28Criticalhealth index
random-robbie/nuclei-templates
Community curated list of template files for the nuclei engine to find security vulnerability and fingerprinting the targets.
Mixed★ 4Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
41At riskhealth index
sinonjs/commons
Simple functions shared among the sinon end user libraries
JavaScript★ 4↓ 226M/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
Go
20Criticalhealth index
vault-thirteen/TIFFer
TIFF format parser.
Go★ 4Jul 19, 2026
GPL-3.0Jul 19, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-entities-html4
Map of named character references from HTML 4
JavaScript★ 4↓ 148M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0