Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,531
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,926 recordsRanked by popularity · browse by tag · record statistics
Go
9Criticalhealth index
txix-open/etp
Event transport protocol - alternative to socket.io
Go★ 15Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/definitions
The package provides definition syntax. Definition is describing a way to create and configure a service or an object.
PHP★ 15↓ 42.3K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/test-support
No repository description published.
PHP★ 15↓ 10.4K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
—
2Criticalhealth index
Duzopy/VRChat-Crasher
VRChat Crasher
ShaderLab · GLSL★ 14Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
9Criticalhealth index
avto-dev/bank-card-vue-component
Vue.js component with bank card
JavaScript · Vue★ 14↓ 185/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/components
No repository description published.
TypeScript · SCSS★ 14↓ 2,041/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
crates.io
8Criticalhealth index
estin/geosuggest
suggest by name or find nearest by coordinates cities
Rust★ 14↓ 9,011/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
34At Riskhealth index
grafana/xk6-ssh
Client extension for interacting with a host over SSH as part of your k6 test.
Go · Makefile★ 14Sep 26, 2026
Apache-2.0Sep 26, 2026 · metrics 2.10.0
Hex
22At Riskhealth index
kortirso/chess
Elixir package for playing chess
Elixir★ 14↓ 1,742/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
8Criticalhealth index
masihgh/iranian-bank-list-js
A Javascript library to identify Iranian banks based on card numbers (first 6 digits) and IBANs. It also includes utility functions to validate card numbers and IBANs using standard algorithms.
JavaScript★ 14↓ 350/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
oroinc/customer-portal
OroCommerce package with customer portal and non authenticated visitor website base features.
PHP★ 14↓ 3,766/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/centrifugo
🔌 RoadRunner Centrifugo Bridge
PHP★ 14↓ 106K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/logger
[READ ONLY] LogFactory and global log listeners. Subtree split of the Spiral Logger component (see spiral/framework)
PHP★ 14↓ 750.4K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
10Criticalhealth index
txix-open/isp-kit
No repository description published.
Go★ 14Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/data-db
Database adapter for data interfaces
PHP★ 14↓ 4,130/moSep 15, 2026
BSD-3-ClauseSep 15, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
yiisoft/hydrator-validator
A hydrator that also does validation, including raw data.
PHP★ 14↓ 19.1K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
1inch/limit-order-sdk
No repository description published.
TypeScript★ 13↓ 80.6K/moSep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
7Criticalhealth index
DangeL187/erax
Fancy errors tracing
Go★ 13Sep 29, 2026
MITSep 29, 2026 · metrics 2.10.0
npm
27At Riskhealth index
PeculiarVentures/ByteStream.js
ByteStream.js is a set of classes manipulating bytes and bits with optimized for speed perfomance
TypeScript★ 13↓ 32.6M/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
Percona-Lab/pmm-submodules
A repo dedicated to building Percona Monitoring and Management (PMM)
Python · Makefile★ 13Sep 20, 2026
AGPL-3.0Sep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
SberBusiness/triplex-next
No repository description published.
TypeScript★ 13↓ 1,995/moSep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
5Criticalhealth index
JavaScript★ 13↓ 3,698/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm
8Criticalhealth index
bad4iz/crypto-pro-cadesplugin
JavaScript-библиотека для работы с сертификатами и создания электронной подписи через «КриптоПро ЭЦП Browser plug-in».
JavaScript★ 13↓ 3,096/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
broxus/tycho-types
A set of primitive types and utilities for the Tycho node
Rust★ 13↓ 7,665/moOct 10, 2026
Apache-2.0Oct 10, 2026 · metrics 2.10.0
npm
11Criticalhealth index
diegomura/media-engine
Media queries engine written in pure JS!
TypeScript · JavaScript★ 13↓ 19.7M/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm
29At Riskhealth index
dy/hyperf
Hypertext fragment builder
JavaScript★ 13Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
dy/tst
Tests without efforts
JavaScript★ 13↓ 13.3K/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0