Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,649
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,902 recordsRanked by popularity · browse by tag · record statistics
Go
34At Riskhealth index
Kong/go-kong
Go binding for Kong's admin API
Go★ 101Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
faststream-community/zMQTT
Pure asyncio MQTT 3.1.1 and 5.0 for Python 3.10+, with deterministic subscription routing, bounded queues, and correlation-safe request/response.
Python★ 101↓ 10.4K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
16Criticalhealth index
TheDragonCode/pretty-routes
Pretty routes for Laravel Framework
PHP · Blade★ 100↓ 3,087/moOct 8, 2026
MITOct 8, 2026 · metrics 2.10.0
crates.io
7Criticalhealth index
mrDIMAS/hrtf
Head-Related Transfer Function (HRTF) audio signal processor.
Rust★ 100↓ 23.3K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
19Criticalhealth index
victors1681/dgii-ecf
DGII.gov.do - Facturación Electrónica - Authentication y firma electrónica para generar comprobante electrónicos digitales. República Dominicana
TypeScript★ 100↓ 10.4K/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
Go
28At Riskhealth index
deckhouse/yandex-csi-driver
A Container Storage Interface (CSI) Driver for Yandex.Cloud Compute Disks
Go★ 99Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
npm
10Criticalhealth index
miadabdi/editorjs-parser
This package parses output blocks of Editorjs to html
TypeScript★ 98↓ 37.1K/moOct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
—
3Criticalhealth index
vjik/arcticModal
jQuery plugin for modal boxes development. See more here: http://arcticlab.ru/arcticmodal/
JavaScript · CSS★ 96Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
crates.io
34At Riskhealth index
RustCrypto/block-modes
Collection of generic block mode algorithms written in pure Rust
Rust★ 95↓ 31.1M/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
npm
12Criticalhealth index
loganfsmyth/gensync
Allows users to use generators in order to write common functions that can be both sync or async.
JavaScript★ 95↓ 541M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
gtk-rs/glib
DEPRECATED, use https://github.com/gtk-rs/gtk-rs-core repository instead!
Rust★ 94Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
yiisoft/injector
PSR-11 compatible injector
PHP★ 94↓ 228.6K/moSep 12, 2026
BSD-3-ClauseSep 12, 2026 · metrics 2.10.0
npm
32At Riskhealth index
cryptoalgebra/Algebra
Algebra AMM main repository. Contact us for licenses.
TypeScript · Solidity★ 93↓ 14.6K/moSep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
npm
34At Riskhealth index
react-declarative/react-declarative
A React form builder which interacts with a JSON endpoint to generate nested 12-column grids with input fields and automatic state management in a declarative style. Endpoint is typed by TypeScript guards (IntelliSense available). This tool is based on material-ui components, so your application will look beautiful on any device...
TypeScript★ 93↓ 423/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
11Criticalhealth index
IlyasYOY/obs.nvim
Obsidian-like Neovim plugin.
Lua★ 92Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
30At Riskhealth index
effector/reflect
Easily render React components with everything you love from ☄️ effector.
TypeScript★ 90↓ 4,975/moSep 28, 2026
No licenseSep 28, 2026 · metrics 2.10.0
Go
10Criticalhealth index
Antonboom/nilnil
The Golang linter that checks that there is no simultaneous return of `nil` error and an invalid value.
Go★ 87Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
14Criticalhealth index
blakeembrey/array-flatten
Flatten a multi-dimensional array in JavaScript.
JavaScript · TypeScript★ 87↓ 211M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
4Criticalhealth index
chihongze/girlfriend
基于工作流的Python脚本引擎,从此写代码就像做填空题 ~
Python★ 87Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
httpsoft/http-message
Strict and fast implementation of PSR-7 and PSR-17
PHP★ 87↓ 45K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
npm
19Criticalhealth index
twilio/flex-plugin-builder
Packages related to building a Twilio Flex Plugin
TypeScript★ 87↓ 168.2K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
JBZoo/Data
Extended implementation of ArrayObject - useful collection for any config in your system (write, read, store, change, validate, convert to other format and etc).
PHP★ 86↓ 20.3K/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm
8Criticalhealth index
fardad-dev/swagger-typescript
An auto typescript/javascript code generator from swagger.
TypeScript · JavaScript★ 86Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
34At Riskhealth index
reclaimprotocol/attestor-core
The attestor-core (aka witness server) securely intermediates internet data exchange, using TLS and zero-knowledge proofs to verify and sign user claims with minimal information disclosure.
TypeScript★ 86↓ 10.8K/moOct 4, 2026
AGPL-3.0Oct 4, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
yiisoft/yii2-composer
Yii 2 composer extension
PHP★ 86↓ 524.3K/moSep 16, 2026
BSD-3-ClauseSep 16, 2026 · metrics 2.10.0
npm
12Criticalhealth index
MrRefactoring/confluence.js
confluence.js is a powerful Node.JS/Browser module that allows you to interact with the Confluence API very easily
TypeScript★ 85↓ 163.3K/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
8Criticalhealth index
deLiseLINO/codex-quota
Terminal interface for Codex quota monitoring and account switching across Codex and OpenCode
Go★ 84Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0