Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,724
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,246 recordsRanked by popularity · browse by tag · record statistics
Packagist
30At Riskhealth index
yiisoft/yii2-composer
Yii 2 composer extension
PHP★ 86↓ 471.5K/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JBZoo/Data
Extended implementation of ArrayObject - useful collection for any config in your system (write, read, store, change, validate, convert to other format and etc).
PHP★ 85↓ 10.4K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
13Criticalhealth index
MrRefactoring/confluence.js
confluence.js is a powerful Node.JS/Browser module that allows you to interact with the Confluence API very easily
TypeScript★ 85↓ 112.4K/moJul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Go
11Criticalhealth index
Antonboom/nilnil
The Golang linter that checks that there is no simultaneous return of `nil` error and an invalid value.
Go★ 84Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
samdark/yii2-psr-log-target
Yii 2.0 log target that is able to write messages to PSR-3 compatible logger
PHP★ 84↓ 45.7K/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
npm
19Criticalhealth index
sindresorhus/is-retry-allowed
Check whether a request can be retried based on the `error.code`
JavaScript★ 81↓ 64.6M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
Go
34At Riskhealth index
skycoin/skywire
Skywire Node implementation
Go★ 81Jul 29, 2026
No licenseJul 29, 2026 · metrics 2.10.0
npm
30At Riskhealth index
nodelib/nodelib
Monorepo for NodeLib libraries
TypeScript · JavaScript★ 80Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
roadrunner-php/http
🔌 PSR7 Worker Client for RoadRunner application server.
PHP★ 80↓ 534.1K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
pear/HTTP_Request2
Provides an easy way to perform HTTP requests (and does not require curl extension for this).
PHP★ 76↓ 37.3K/moSep 3, 2026
No licenseSep 3, 2026 · metrics 2.10.0
Go
26At Riskhealth index
Djarvur/go-err113
Golang linter to check the errors handling expressions
Go★ 75Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
faststream-community/zMQTT
Pure asyncio MQTT 3.1.1 and 5.0 client library. No paho dependency, no threading, no god classes.
Python★ 74↓ 17.3K/moAug 7, 2026
MITAug 7, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
flachesis/gemini-rust
A comprehensive Rust client library for Google's Gemini.
Rust★ 74↓ 5,093/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/rbac
Role based access control
PHP★ 74↓ 10.8K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
dy/watr
Compile WebAssembly text (WAT) to binary. Parse, print, minify, optimize.
JavaScript · WebAssembly★ 72↓ 4,466/moAug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
npm
12Criticalhealth index
shaadcode/payload-auditor
Payload CMS plugin for event tracking, auditing, and security. Monitor activities and analyze user behavior.
TypeScript★ 72↓ 5,208/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Go
34At Riskhealth index
annetutil/gnetcli
The ultimate solution for CLI automation in Golang
Go★ 71Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
ydb-platform/ydb-rs-sdk
No repository description published.
Rust★ 71↓ 39K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
31At Riskhealth index
colorjs/color-interpolate
Get interpolated color from a palette
JavaScript★ 70↓ 82.2K/moJul 31, 2026
No licenseJul 31, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/bootstrap5
Yii Framework Bootstrap 5 support
PHP★ 70↓ 3,326/moAug 3, 2026
BSD-3-ClauseAug 3, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii-console
Yii console components
PHP★ 70↓ 17.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
Packagist
16Criticalhealth index
bizley/yii2-jwt
JWT Integration for Yii 2
PHP★ 69↓ 17.3K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/transform
Simple transformer YFM (Yandex Flavored Markdown) to HTML.
TypeScript★ 69↓ 43K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
PyPI
6Criticalhealth index
kmike/text-unidecode
The most basic Text::Unidecode port (licensed under Artistic License or GPL or GPLv2+ - choose whatever you want)
Python★ 69Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
Go
11Criticalhealth index
aisa-it/aiplan
AIPlan – open source PM system. Import from Jira, replace Confluence with AIDoc, collaborate in workspaces. Included in Russian Ministry of Digital Development software registry (entry №33830, 18.06.2026).
Go★ 68Aug 19, 2026
MPL-2.0Aug 19, 2026 · metrics 2.10.0
npm
12Criticalhealth index
caiiiycuk/emulators
emulator protocol and backends
C · JavaScript · C++★ 68Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
hflabs/dadata-csharp
Data cleansing, enrichment and suggestions via Dadata API
C#★ 68Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
1c-syntax/mdclasses
Разбор метаданных конфигураций, расширений и т.д. 1С:Предприятие
Java · 1C Enterprise★ 66Jul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
allure-framework/allure-phpunit
Allure integrations for PHP test frameworks: PHPUnit
PHP★ 66↓ 181.3K/moAug 7, 2026
Apache-2.0Aug 7, 2026 · metrics 2.10.0