Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,754
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,247 recordsRanked by popularity · browse by tag · record statistics
npm
32At Riskhealth index
wert-io/widget-initializer
Public NPM library for Wert partners to integrate. Also published to https://javascript.wert.io
JavaScript · TypeScript★ 6↓ 16.4K/moSep 5, 2026
No licenseSep 5, 2026 · metrics 2.10.0
npm
11Criticalhealth index
ASDAlexey/vitest-auto-spy
Auto-generate fully-typed test spies from a class — across Vitest, Bun & node:test, with Angular/NestJS/React/Vue/Svelte recipes. A jest-auto-spies drop-in replacement.
TypeScript★ 5↓ 5,712/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Packagist
27At Riskhealth index
Automattic/jetpack-connection
[READ ONLY] Jetpack Connection. This repository is a mirror, for issue tracking and development head to: https://github.com/automattic/jetpack
PHP★ 5↓ 147.7K/moJul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
Laravel-Lang/starter-kits
Translations for Laravel Starter Kits
PHP★ 5↓ 249K/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
8Criticalhealth index
LastDragon-ru/lara-asp-graphql
This package provides highly powerful `@searchBy` and `@sortBy` directives for lighthouse-php.
PHP★ 5↓ 4,178/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
OpenIdentityPlatform/commons
Parent POM for projects. Provides default project build configuration.
Java★ 5Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
Maven
26At Riskhealth index
Tap30/ripple-kotlin
Official Ripple SDKs for Kotlin.
Kotlin★ 5Aug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
8Criticalhealth index
XiaofengdiZhu/SSS
A simulator of SoundGenerator in Survivalcraft
JavaScript · HTML · CSS★ 5Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
Maven
3Criticalhealth index
aMiscreant/Sanitizr
Sanitizr is a powerful Android utility app for cleaning metadata and timestamps from various file types including images, videos, documents, PDFs, archives, and ebooks.
Kotlin★ 5Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
bootique/bootique-jdbc
JDBC DataSource integration with Bootique
Java★ 5Aug 31, 2026
Apache-2.0Aug 31, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
exordos/gcl_sdk
SDK for Exordos
Python★ 5↓ 6,483/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
gbtami/Fairy-Stockfish
chess variant engine supporting Xiangqi, Shogi, Janggi, Makruk, S-Chess, Crazyhouse, Bughouse, and many more
C++★ 5↓ 3,987/moAug 26, 2026
GPL-3.0Aug 26, 2026 · metrics 2.10.0
Go
28At Riskhealth index
go-toolsmith/astfmt
Package astfmt implements ast.Node formatting with fmt-like API.
Go★ 5Aug 4, 2026
MITAug 4, 2026 · metrics 2.10.0
npm
22At Riskhealth index
liedekef/fdatepicker
Cool jQuery-free datepicker
JavaScript★ 5↓ 2,882/moJul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
NuGet
24At Riskhealth index
mindbox-cloud/Quokka
Шаблонизатор
C#★ 5Aug 25, 2026
Apache-2.0Aug 25, 2026 · metrics 2.10.0
npm
12Criticalhealth index
pshenmic/dash-platform-sdk
A lightweight Javascript Dash Platform SDK
TypeScript★ 5↓ 2,033/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Go
12Criticalhealth index
runixer/laplaced
A lightweight, self-hosted Personal AI Daemon written in Go. Features Hybrid RAG (SQLite + Vectors), Long-term Memory, and Voice I/O. Optimized for low-end VPS and Raspberry Pi.
Go★ 5Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/files
[READ ONLY] File Toolkit: atomic file manager, virtual file streams. Subtree split of the Spiral Files component (see spiral/framework)
PHP★ 5↓ 24.2K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/pagination
[READ ONLY] Common pagination interfaces. Subtree split of the Spiral Pagination component (see spiral/framework)
PHP★ 5↓ 39.2K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
toronik/env
No repository description published.
Kotlin★ 5Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Go
3Criticalhealth index
x1hy9/Go-cms-scan
一个Go语言创造的cms扫描器
Go★ 5Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
yiisoft/psr-dummy-provider
Dummy PSR provider
Mixed★ 5↓ 5,500/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
1c-syntax/bsl-common-library
Библиотека базовых сущностей bsl, mdo
Java★ 4Jul 21, 2026
LGPL-3.0Jul 21, 2026 · metrics 2.10.0
Go
9Criticalhealth index
Behnam-RK/dezhban
Cross-platform network kill switch (Go) — blocks traffic by geo-IP country
Go · Swift★ 4Jul 18, 2026
MITJul 18, 2026 · metrics 2.10.0
npm
9Criticalhealth index
DjonnyX/ng-virtual-scroll-view
High-performance virtual scroll container for Angular
TypeScript★ 4↓ 6,547/moAug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
npm
13Criticalhealth index
Krivega/sip-connector
TypeScript SDK для интеграции WebRTC-приложений с платформой Vinteo через SIP-протокол. Предоставляет высокоуровневый API для создания полнофункциональных видеоконференций.
TypeScript★ 4↓ 2,983/moJul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Packagist
32At Riskhealth index
Laravel-Lang/status-generator
Translation status generator for Laravel Lang projects.
PHP★ 4↓ 22.2K/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0