Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,492
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,925 recordsRanked by popularity · browse by tag · record statistics
PyPI · npm
34At Riskhealth index
ai-engineers-guild/ai-stp
Build, verify, store, select and install complete AI harness setups. Primary consumer is your agent, through the CLI.
Python · TypeScript★ 5↓ 4,425/moOct 11, 2026
AGPL-3.0Oct 11, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
bootique/bootique-jdbc
JDBC DataSource integration with Bootique
Java★ 5Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
21At Riskhealth index
easyp-tech/protoc-gen-mcp
No repository description published.
Go · Python★ 5Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
exordos/gcl_sdk
SDK for Exordos
Python★ 5↓ 6,483/moSep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
27At Riskhealth index
gbtami/Fairy-Stockfish
chess variant engine supporting Xiangqi, Shogi, Janggi, Makruk, S-Chess, Crazyhouse, Bughouse, and many more
C++★ 5↓ 3,987/moAug 26, 2026
GPL-3.0Aug 26, 2026 · metrics 2.10.0
Go
27At Riskhealth index
go-toolsmith/astfmt
Package astfmt implements ast.Node formatting with fmt-like API.
Go★ 5Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
gravity-ui/playwright-tools
No repository description published.
TypeScript★ 5↓ 13.1K/moOct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
NuGet
24At Riskhealth index
mindbox-cloud/Quokka
Шаблонизатор
C#★ 5Aug 25, 2026
Apache-2.0Aug 25, 2026 · metrics 2.10.0
npm · Maven
34At Riskhealth index
mindbox-cloud/react-native-sdk
No repository description published.
TypeScript · Kotlin · Swift★ 5↓ 2,199/moOct 21, 2026
Custom licenseOct 21, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
mindsdb/cowork-server
FastAPI backend for MindsHub Cowork. Manages projects, conversations, files, scheduling, memory, and agent orchestration with a SQLite-backed data layer.
Python★ 5↓ 21.1K/moSep 14, 2026
AGPL-3.0Sep 14, 2026 · metrics 2.10.0
Packagist · npm · RubyGems
14Criticalhealth index
neos/media-browser
[READ-ONLY] A media browser UI package for Neos
JavaScript★ 5↓ 17.8K/moOct 23, 2026
No licenseOct 23, 2026 · metrics 2.10.0
PyPI · crates.io
11Criticalhealth index
prostomarkeloff/find-dup-defs
Find the copy-pasted code your linter can't — rank it by how worth refactoring it is — and surface the recurring shapes that should become one helper (Python/TS/Rust)
Rust★ 5↓ 3,941/moOct 14, 2026
MITOct 14, 2026 · metrics 2.10.0
npm
11Criticalhealth index
pshenmic/dash-platform-sdk
A lightweight Javascript Dash Platform SDK
TypeScript★ 5↓ 1,070/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
roadrunner-php/app-logger
🔌 Application logger plugin
PHP★ 5↓ 137.3K/moOct 10, 2026
MITOct 10, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
spiral/files
[READ ONLY] File Toolkit: atomic file manager, virtual file streams. Subtree split of the Spiral Files component (see spiral/framework)
PHP★ 5↓ 29.9K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/pagination
[READ ONLY] Common pagination interfaces. Subtree split of the Spiral Pagination component (see spiral/framework)
PHP★ 5↓ 33.4K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
toronik/env
No repository description published.
Kotlin★ 5Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
11Criticalhealth index
weirdpattern/eslint-config-typescript
An opinionated set of ESLint rules for TypeScript projects
JavaScript★ 5↓ 112.6K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
3Criticalhealth index
x1hy9/Go-cms-scan
一个Go语言创造的cms扫描器
Go★ 5Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
yiisoft/psr-dummy-provider
Dummy PSR provider
Mixed★ 5↓ 4,053/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
1c-syntax/bsl-common-library
Библиотека базовых сущностей bsl, mdo
Java★ 4Sep 12, 2026
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
Maven
34At Riskhealth index
1c-syntax/utils
No repository description published.
Java★ 4Sep 12, 2026
LGPL-3.0Sep 12, 2026 · metrics 2.10.0
PyPI
6Criticalhealth index
B4DCATs/openvpn_exporter
🔒 Secure Prometheus exporter for OpenVPN servers with IP access control, comprehensive monitoring, and Grafana dashboard
Python · Shell★ 4Oct 12, 2026
Apache-2.0Oct 12, 2026 · metrics 2.10.0
npm
8Criticalhealth index
DjonnyX/ng-virtual-scroll-view
High-performance virtual scroll container for Angular
TypeScript★ 4↓ 253/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
10Criticalhealth index
Exeteres/wg-feed
wg-feed is a draft protocol and reference implementation for distributing WireGuard tunnel configurations via subscription URLs
Go★ 4Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
8Criticalhealth index
JavaScript★ 4↓ 3,085/moOct 12, 2026
No licenseOct 12, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
Laravel-Lang/status-generator
Translation status generator for Laravel Lang projects.
PHP★ 4↓ 17.6K/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
—
2Criticalhealth index
aMiscreant/TermuxTube
Automate YouTube video and Shorts uploads directly from your Android phone using Termux. Includes AI-generated titles, description handling, tag assignment, and OAuth-authenticated uploading via the YouTube Data API. Optimized for mobile creators, content farms, and automation fans.
Python★ 4Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0