Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,670
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,273 recordsRanked by popularity · browse by tag · record statistics
Go
24Criticalhealth index
xssnick/tonutils-storage-provider
Alternative TON Storage Provider implementation compatible with tonutils-storage
Go★ 14Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
28Criticalhealth index
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
PHP★ 14↓ 9,483/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
yiisoft/translator-message-php
Yii i18n PHP message storage
PHP★ 14↓ 16.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
Toflar/state-set-index
Implementation of the State Set Index Algorithm in PHP
PHP★ 13↓ 24K/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Hex
27Criticalhealth index
edgurgel/ham
Library to validate function arguments and return values against their typespecs. Extracted out from Hammox
Elixir★ 13↓ 120.9K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
24Criticalhealth index
hossein1376/kamune
Communication over untrusted networks
Go · Svelte★ 13Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
18Criticalhealth index
nikitalita/gdsdecomp
Godot reverse engineering tools
C++★ 13Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
24Criticalhealth index
pyanodon/pypetroleumhandling
No repository description published.
Lua★ 13Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
31At riskhealth index
yiisoft/cache-file
Yii Cache Library - File Handler
PHP★ 13↓ 7,843/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
32At riskhealth index
yiisoft/mailer-symfony
Yii Framework Symfony Mailer Integration
PHP★ 13↓ 3,097/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Go
28Criticalhealth index
goreflect/go_structor
Go configurator structures library
Go★ 12Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
29Criticalhealth index
goreflect/gostructor
Go configurator structures library
Go★ 12Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
15Criticalhealth index
rsyslog/libestr
OFFICIAL libestr repository on github
C★ 12Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Maven
11Criticalhealth index
appKODE/build-publish-plugin
Gradle plugin for Android that automates build publishing: consistent artifact naming + changelog/release notes generation, and variant-aware uploads to Firebase App Distribution, Confluence, Telegram, Slack and more
Kotlin★ 11Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist · npm
20Criticalhealth index
dnwjn/nova-button
A Nova package for rendering buttons on different views.
PHP · Vue★ 11↓ 4,838/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
RubyGems
21Criticalhealth index
excpt/moments
Handles time differences and calculations.
Ruby★ 11Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
36At riskhealth index
laminas/laminas-psr7bridge
PSR-7 <-> laminas-http message conversions
PHP★ 11↓ 67.5K/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
npm
10Criticalhealth index
mazixs/n8n-node-converter-documents
n8n community node that converts various document formats into structured JSON or text for AI agents and workflows.
TypeScript · Rich Text Format · HTML★ 11↓ 8,516/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
32At riskhealth index
reportportal/agent-js-webdriverio
Agent to integrate Webdriver.io with ReportPortal.
TypeScript★ 11↓ 12.4K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Packagist
38At riskhealth index
roadrunner-php/kv
:electric_plug: RoadRunner Key-Value storage SDK
PHP★ 11↓ 271.1K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
yiisoft/input-http
Provides Yii Hydrator attributes to get data from PSR-7 HTTP request and adds extra abilities to middlewares processed by Yii Middleware Dispatcher.
PHP★ 11↓ 9,001/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
26Criticalhealth index
Automattic/jetpack-changelogger
[READ ONLY] Allows for managing changelogs by dropping change files into a changelog directory with each PR. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 10↓ 186.1K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
Automattic/jetpack-device-detection
[READ ONLY] A method to detect device types, originates from `jetpack_is_mobile`. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 10↓ 38.4K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
TheDragonCode/contracts
The Dragon Code's Contracts collection
PHP★ 10↓ 512.8K/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
crates.io
34At riskhealth index
oxc-project/oxc-miette
Forked version of miette
Rust★ 10↓ 1.1M/moJul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Go
28Criticalhealth index
yandex-cloud/go-genproto
Go generated proto packages
Mixed★ 10Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
yiisoft/yii-http
Yii HTTP Application
PHP★ 10↓ 14K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
29Criticalhealth index
yiisoft/yii-runner-console
Yii Console Runner
PHP★ 10↓ 12.1K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0