Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,630
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,930 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
gemini-testing/html-reporter
Html reporter for Testplane (ex-hermione)
TypeScript · JavaScript★ 57↓ 40.2K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/view
Yii view rendering library
PHP★ 57↓ 24.9K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/sponges
Collection of sponge functions written in pure Rust
Rust★ 56↓ 12.5M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
antigenomics/arda
High-throughput mapping and domain partitioning of antigen receptor sequences
Python★ 56↓ 6,669/moSep 27, 2026
GPL-3.0Sep 27, 2026 · metrics 2.10.0
npm
28At Riskhealth index
colorjs/color-parse
Color string parser
JavaScript★ 56↓ 10.9M/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Packagist
26At Riskhealth index
nbgrp/onelogin-saml-bundle
OneLogin SAML Symfony Bundle
PHP★ 56↓ 56.1K/moSep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
PyPI
13Criticalhealth index
redhuntlabs/antisquat
No repository description published.
Python★ 56Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/arrays
Yii Array Helper
PHP★ 56↓ 77.1K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JBZoo/Composer-Diff
See what packages have changed after `composer update`
PHP★ 55↓ 12.5K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
31At Riskhealth index
PeculiarVentures/xmldsigjs
A TypeScript/JavaScript implementation of XML security standards using Web Crypto API for both browsers and Node.js.
TypeScript★ 55↓ 617.8K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
npm
34At Riskhealth index
anolilab/semantic-release
A multi semantic release tool for monorepos.
TypeScript★ 55↓ 329.8K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
30At Riskhealth index
reviewdog/action-hadolint
Run hadolint with reviewdog 🐶
Shell · jq★ 55Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go · PyPI
16Criticalhealth index
MiXaiLL76/auto_ai_router
High-performance proxy router for LLM APIs with automatic load balancing, rate limiting, and fail2ban protection
Go★ 54Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
11Criticalhealth index
malikhan-dev/zenql
An Integrated Query Language For Go. Compiled, Type-Safe And Fast. (Pure go)
Go★ 54Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
Java★ 54Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
chython/chython
Library for processing molecules and reactions in python way
Python · Cython★ 53Sep 17, 2026
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
Hex
28At Riskhealth index
cyteon/discord_gleam
A library to create discord bots in gleam
Gleam★ 53↓ 378/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
crates.io · npm · Go +1
14Criticalhealth index
ekhodzitsky/gigastt
Local STT server powered by GigaAM v3.
Rust · Python★ 53↓ 661/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
PyPI
5Criticalhealth index
Mahdy-Ahmadi/rubka
rubika robot library rubka for bots
Python★ 51↓ 4,198/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
Packagist · npm
19Criticalhealth index
SemanticMediaWiki/SemanticResultFormats
Provides additional visualizations (result formats) for Semantic MediaWiki
JavaScript · PHP★ 51↓ 3,672/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
npm
31At Riskhealth index
plumelo/rollup-plugin-styler
🎨 Universal Rollup plugin for styles: PostCSS, Sass, Less, Stylus and more.
TypeScript · JavaScript★ 51↓ 215.7K/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
taiga-family/editor
Tiptap and Taiga UI
HTML · TypeScript★ 51↓ 4,799/moOct 15, 2026
Apache-2.0Oct 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
ytsaurus/ytsaurus-ui
Web interface for YTsaurus.
TypeScript · JavaScript★ 51↓ 9,961/moOct 7, 2026
Custom licenseOct 7, 2026 · metrics 2.10.0
Hex
19Criticalhealth index
beam-community/ua_parser
UserAgentParser implementation for Elixir
Elixir · CSS★ 50↓ 26.8K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
34At Riskhealth index
salute-developers/plasma
Salute Design System
TypeScript · MDX★ 50↓ 378.1K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
NuGet · npm
17Criticalhealth index
stavroskasidis/BlazorDialog
Easy dialog management for Blazor !
HTML · C# · CSS★ 50Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
34At Riskhealth index
Borodin/typescript-telegram-bot-api
Telegram Bot API wrapper for Node.js written in TypeScript
TypeScript★ 49↓ 16.4K/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
34At Riskhealth index
essentialkaos/ek
Auxiliary packages for Go
Go★ 49Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
3Criticalhealth index
norksec/usbwatchdog
usbWatchdog - monitor changes to your usb ports, and if anything is plugged in or removed, wipe RAM and shut down.
Python★ 49Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0