Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,518
Monthly downloads under inspection
581B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,614 recordsRanked by popularity · browse by tag · record statistics
Packagist
29At Riskhealth index
antonioribeiro/random
Generate random strings or numeric values
PHP★ 70↓ 154.1K/moAug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
31At Riskhealth index
beacon-biosignals/Onda.jl
A Julia package for high-throughput manipulation of structured signal data across arbitrary domain-specific encodings, file formats and storage layers
Julia★ 70Aug 16, 2026
Custom licenseAug 16, 2026 · metrics 2.10.0
npm
23At Riskhealth index
boopathi/babel-minify
:rotating_light: Project is Discontinued and I'm contributing here -
JavaScript★ 70↓ 1,311/moJul 28, 2026
No licenseJul 28, 2026 · metrics 2.10.0
npm
31At Riskhealth index
colorjs/color-interpolate
Get interpolated color from a palette
JavaScript★ 70↓ 82.2K/moJul 31, 2026
No licenseJul 31, 2026 · metrics 2.10.0
npm
30At Riskhealth index
deoxxa/duplexer2
Like duplexer (http://npm.im/duplexer) but using streams2
JavaScript★ 70↓ 98.8M/moAug 31, 2026
Custom licenseAug 31, 2026 · metrics 2.10.0
19Criticalhealth index
mapbox/geojson-cpp
A C++14 library for converting GeoJSON into geometry.hpp representation
C++★ 70Sep 9, 2026
ISCSep 9, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
miladrahimi/php-jwt
A PHP implementation of JWT (JSON Web Token) generator, parser, verifier, and validator.
PHP★ 70↓ 4,343/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/bootstrap5
Yii Framework Bootstrap 5 support
PHP★ 70↓ 3,326/moAug 3, 2026
BSD-3-ClauseAug 3, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/yii-console
Yii console components
PHP★ 70↓ 17.3K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.10.0
npm
14Criticalhealth index
3dmind/jest-sonar-reporter
A Sonar test reporter for Jest.
JavaScript★ 69↓ 2.5M/moAug 27, 2026
MITAug 27, 2026 · metrics 2.10.0
26At Riskhealth index
NStefan002/2048.nvim
Play 2048 inside your favourite editor
Lua★ 69Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
npm
32At Riskhealth index
ViacomInc/data-point
JavaScript Utility for collecting, processing and transforming data
JavaScript★ 69↓ 1,083/moJul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
apigee/terraform-modules
Terraform modules and ready to use end-to-end examples for Apigee.
HCL · Python★ 69Aug 17, 2026
Apache-2.0Aug 17, 2026 · metrics 2.10.0
Packagist
16Criticalhealth index
bizley/yii2-jwt
JWT Integration for Yii 2
PHP★ 69↓ 17.3K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
npm
17Criticalhealth index
didilinkin/elf-taro
Taro 小程序 脚手架 (Taro 3 + Dva + Typescript + Immer) - 内置 Redux 计数器, 异步数据请求 与 腾讯小程序地图 demo
TypeScript · JavaScript★ 69Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
npm
34At Riskhealth index
diplodoc-platform/transform
Simple transformer YFM (Yandex Flavored Markdown) to HTML.
TypeScript★ 69↓ 43K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
npm
26At Riskhealth index
jaredhanson/utils-merge
merge() utility function
JavaScript · Makefile★ 69↓ 230M/moAug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
PyPI
6Criticalhealth index
kmike/text-unidecode
The most basic Text::Unidecode port (licensed under Artistic License or GPL or GPLv2+ - choose whatever you want)
Python★ 69Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
murarth/assert_matches
Provides macro `assert_matches` for testing pattern matching
Rust★ 69↓ 3.5M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Go · PyPI
34At Riskhealth index
paraglider-project/paraglider
Streamlining cloud networking
Go★ 69Aug 10, 2026
Apache-2.0Aug 10, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
rsalmei/about-time
A cool helper for tracking time and throughput of code blocks, with beautiful human friendly renditions.
Python★ 69Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
npm
16Criticalhealth index
shibukawa/oktavia
Full text search engine for JS environments
JavaScript★ 69Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
54Moderatehealth index
ROCm/hipSPARSE
[DEPRECATED] Moved to ROCm/rocm-libraries repo
C++ · C★ 68Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
23At Riskhealth index
UCLOrengoGroup/cath-tools
Protein structure comparison tools such as SSAP and SNAP
C++ · Promela★ 68Sep 8, 2026
GPL-3.0Sep 8, 2026 · metrics 2.10.0
Go
11Criticalhealth index
aisa-it/aiplan
AIPlan – open source PM system. Import from Jira, replace Confluence with AIDoc, collaborate in workspaces. Included in Russian Ministry of Digital Development software registry (entry №33830, 18.06.2026).
Go★ 68Aug 19, 2026
MPL-2.0Aug 19, 2026 · metrics 2.10.0
Go · npm
19Criticalhealth index
altinity/altinity-dashboard
Altinity Dashboard helps you manage ClickHouse installations controlled by clickhouse-operator.
TypeScript · Go★ 68Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
12Criticalhealth index
caiiiycuk/emulators
emulator protocol and backends
C · JavaScript · C++★ 68Jul 20, 2026
GPL-2.0Jul 20, 2026 · metrics 2.10.0
NuGet
8Criticalhealth index
hflabs/dadata-csharp
Data cleansing, enrichment and suggestions via Dadata API
C#★ 68Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
npm
26At Riskhealth index
microstates/ember
@microstates/ember - Official Microstates bindings for Ember.js
JavaScript · HTML · CSS★ 68↓ 132/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0