Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,364
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,918 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
ton-connect/sdk
SDK for TON Connect 2.0 — a comprehensive communication protocol between wallets and apps in TON ecosystem
TypeScript★ 546↓ 1.5M/moSep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
samdark/sitemap
Sitemap and sitemap index builder
PHP★ 542↓ 19.1K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Go
10Criticalhealth index
vernette/warpscout
🛰️ Cloudflare WARP endpoint scanner - find working endpoints over wg/awg/masque and see the exit region and edge node they land on
Go★ 525Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
34At Riskhealth index
sethvargo/go-githubactions
Go SDK for GitHub Actions - easily author GitHub Actions in Go
Go★ 520Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
RubyGems
38Weakhealth index
brianmario/escape_utils
Faster string escaping routines for your ruby apps
C · Ruby★ 514Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
11Criticalhealth index
nikepan/clickhouse-bulk
Collects many small inserts to ClickHouse and send in big inserts
Go★ 512Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
flant/addon-operator
A system to manage additional components for Kubernetes cluster in a simple, consistent and automated way.
Go★ 509Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/laravel-bridge
Complete Laravel integration for RoadRunner with support for HTTP, Jobs, gRPC, and Temporal plugins - going beyond Octane's capabilities
PHP★ 509↓ 7,911/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
YanYuanFE/react-native-signature-canvas
:black_nib: React Native Signature Component based WebView Canvas for Android && IOS && expo
JavaScript · CSS★ 506↓ 770.3K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
34At Riskhealth index
ozontech/file.d
A blazing fast tool for building data pipelines: read, process and output events. Our community: https://t.me/file_d_community
Go★ 503Sep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
gtk-rs/gtk3-rs
Rust bindings for GTK 3
Rust★ 502↓ 16.9M/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
NuGet
11Criticalhealth index
Taritsyn/WebMarkupMin
The Web Markup Minifier (abbreviated WebMarkupMin) - a .NET library that contains a set of markup minifiers. The objective of this project is to improve the performance of web applications by reducing the size of HTML, XHTML and XML code.
C#★ 497Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
npm
34At Riskhealth index
necordjs/necord
🤖 A module for creating Discord bots using NestJS, based on Discord.js
TypeScript★ 497↓ 24.9K/moOct 9, 2026
MITOct 9, 2026 · metrics 2.10.0
NuGet
34At Riskhealth index
WildGums/Orchestra
Orchestra is a composable shell and WPF framework built on top of Catel
C#★ 495Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
16Criticalhealth index
MrRefactoring/jira.js
Modern Jira REST API client for JavaScript & TypeScript — Jira Cloud API v2/v3, Agile & Service Desk. Type-safe, tree-shakable, works in Node.js and browsers (ESM/CJS).
TypeScript★ 493↓ 1.3M/moSep 25, 2026
MITSep 25, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
servo/euclid
Geometry primitives (basic linear algebra) for Rust
Rust★ 492Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
voronind/awesome-slugify
Python flexible slugify function
Python★ 491Sep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
PHP★ 483↓ 861.9K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
34At Riskhealth index
terser/html-minifier-terser
actively maintained fork of html-minifier - minify HTML, CSS and JS code using terser - supports ES6 code
JavaScript★ 482↓ 79.2M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
NuGet
13Criticalhealth index
Taritsyn/JavaScriptEngineSwitcher
JavaScript Engine Switcher determines unified interface for access to the basic features of popular JavaScript engines. This library allows you to quickly and easily switch to using of another JavaScript engine.
C# · JavaScript★ 475Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
26At Riskhealth index
ZJONSSON/node-unzipper
node.js cross-platform unzip using streams
JavaScript★ 475↓ 77.6M/moSep 16, 2026
Custom licenseSep 16, 2026 · metrics 2.10.0
npm
13Criticalhealth index
EvgenyOrekhov/eslint-config-hardcore
The most strict (yet practical) ESLint config. 53 plugins. 1405 rules. React, Vue, Node, and pure JS/TS.
JavaScript · TypeScript · HTML★ 471↓ 8,988/moSep 30, 2026
MITSep 30, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii2-authclient
Yii 2 authclient extension.
PHP★ 470↓ 115.4K/moSep 15, 2026
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Go
34At Riskhealth index
deckhouse/prompp
Deckhouse Prom++ – high-performance fork of Prometheus, designed to significantly reduce memory consumption
Go · C++★ 469Oct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
npm · PyPI
34At Riskhealth index
dy/wavefont
Typeface for rendering waveform/data
HTML · JavaScript★ 465↓ 166/moSep 19, 2026
OFL-1.1Sep 19, 2026 · metrics 2.10.0
npm
16Criticalhealth index
Netflix-Skunkworks/stethoscope-app
A desktop application that checks security-related settings and makes recommendations for improvements without requiring central device management or automated reporting.
JavaScript★ 463Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
14Criticalhealth index
akameco/PixivDeck
:two_hearts: pixiv client for Desktop like TweetDeck :two_hearts:
JavaScript★ 451Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
bem/bem-react
A set of tools for developing user interfaces using the BEM methodology in React
TypeScript · JavaScript★ 450↓ 122.9K/moSep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
facebookincubator/infima
A UI framework that provides websites with the minimal CSS and JS needed to get started with building a modern responsive beautiful website
HTML · CSS · MDX★ 450↓ 4.7M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0