Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,080
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,449 recordsRanked by popularity · browse by tag · record statistics
npm
26At Riskhealth index
socketio/emitter
Event emitter component
JavaScript★ 5↓ 75M/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go · npm
25At Riskhealth index
src-d/landing
landing for source{d}
HTML · CSS★ 5Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
—
28At Riskhealth index
tkf/ExternalDocstrings.jl
No repository description published.
Julia★ 5Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Packagist
20At Riskhealth index
tomatophp/console-helpers
tons of helper you need for you artisan command line application
PHP★ 5↓ 29.6K/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Packagist
46Weakhealth index
tomatophp/filament-translation-component
Translation Component as a key/value to use it with Spatie Translatable FilamentPHP Plugin
PHP · Blade★ 5↓ 2,764/moSep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
tyler-technologies-oss/forge-angular
An adapter library for using Forge components in an Angular application.
TypeScript · HTML★ 5Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
35Weakhealth index
unification-com/mainchain
Official Unification Mainchain implementation
Go★ 5Oct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
Packagist
36Weakhealth index
upstash/vector-php
Upstash Vector Database PHP Client, Upsert, Query and Range vectors
PHP★ 5↓ 3,023/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
12Criticalhealth index
utox39/oh-my-update
oh-my-zsh plugin/theme updater
Go★ 5Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
26At Riskhealth index
wailsapp/mimetype
A fast Golang library for media type and file extension detection, based on magic numbers
Go★ 5Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
—
23At Riskhealth index
weaveworks/policy-library
The policy-as-code library
Open Policy Agent★ 5Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
11Criticalhealth index
weirdpattern/eslint-config-typescript
An opinionated set of ESLint rules for TypeScript projects
JavaScript★ 5↓ 112.6K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
15Criticalhealth index
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
Go★ 5Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
28At Riskhealth index
wooorm/character-entities-legacy
List of legacy HTML named character references that don’t need a trailing semicolon
JavaScript★ 5↓ 214M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
28At Riskhealth index
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
JavaScript★ 5↓ 188M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
29At Riskhealth index
wooorm/is-decimal
Check if a character is decimal
JavaScript★ 5↓ 190M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
—
31At Riskhealth index
xapi-project/stdext
Xenserver's (deprecated) extensions to the ocaml standard library
OCaml★ 5Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
—
25At Riskhealth index
zephyrproject-rtos/tinycbor
Concise Binary Object Representation (CBOR) Library
C · C++★ 5Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
0xMiden/p3-miden
Miden-specific Plonky3-based crates
Rust★ 4↓ 14.5K/moSep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
31At Riskhealth index
2sugarcubes/astrograph
A rust library and binary for predicting simple astrological motion.
Rust★ 4↓ 17/moSep 18, 2026
LGPL-3.0Sep 18, 2026 · metrics 2.10.0
Go
19Criticalhealth index
AndroidPoet/revenuecat-cli
Fast, lightweight, and scriptable CLI for RevenueCat
Go · Shell★ 4Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Hex
18Criticalhealth index
BrandtHill/Salchicha
An Elixir NaCl/libsodium-lite Salsa20/ChaCha20 encryption tool
Elixir★ 4↓ 2,077/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
32At Riskhealth index
Delni/preflight
Automate checklist to ensure you are ready to go
Go★ 4Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
npm · NuGet
12Criticalhealth index
DigitalMomentum/Umbraco-Videolizer
A Datatype for pasting in Youtube / Vimeo URLs and embeding them into your site
JavaScript · PowerShell · CSS★ 4Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
24At Riskhealth index
EngoEngine/math
Fork of luxengine/math which is now moved
Go★ 4Sep 20, 2026
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0