Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,367
Monthly downloads under inspection
386B
Median health index
57 Moderate
44,367 recordsRanked by popularity · browse by tag · record statistics
Packagist
54Moderatehealth index
Vardot/drupal-core-patches
Per-Drupal-core-minor patch metapackages for Varbase. One branch per Drupal core MAJOR.MINOR.
PHP★ 1↓ 2,378/moJul 15, 2026
GPL-2.0Jul 15, 2026 · metrics 1.13.0
PyPI
48At riskhealth index
Veedubin/AttackLM
Security AI trainer/tuner and research toolkit. Fine-tune LLMs on MITRE ATT&CK-grounded data (QLoRA, GaLore, DeepSpeed, FP8, BitNet). 24K+ training pairs, 18 sources, 100% per-record provenance. Inversion-audit harness (Carlini 2021, 2022; MUSE 2024; LiRA). Terminal GUI for SSH use. 368+ tests.
Python★ 1↓ 11K/moJul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
npm
56Moderatehealth index
VelixarAi/velixar-mcp-server
MCP server for persistent AI memory — give any AI assistant long-term recall. Works with Claude, Kiro, Cursor, Windsurf.
TypeScript · JavaScript★ 1↓ 2,839/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
44At riskhealth index
VeloraDEX/velora-dex-lib
Go module for Velora DEX transaction building and encoding
Go★ 1Jul 21, 2026
GPL-3.0Jul 21, 2026 · metrics 1.13.0
NuGet
59Moderatehealth index
Vettvangur/Ekom
No repository description published.
C# · TypeScript★ 1Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
53Moderatehealth index
Veyal/interseptor
No repository description published.
Go · JavaScript★ 1Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
64Moderatehealth index
Viking602/go-hydaelyn
AI Agent Framework for Go.
Go★ 1Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Maven · npm
49At riskhealth index
Vincent-Ye/java-litellm
Java rewrite of LiteLLM's open-source parts: unified LLM SDK, Router and OpenAI-compatible Proxy
Java · TypeScript★ 1Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Go
44At riskhealth index
VoinzzZ/VoinzNext
No repository description published.
Go★ 1Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
46At riskhealth index
Volare-Consulting-Software/gimp-mcp
MCP server for GIMP — drive GIMP image editing from AI assistants over the Model Context Protocol
TypeScript★ 1↓ 278/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
59Moderatehealth index
Webamoki/Web-svelte
Svelte UI components and utility functions
Svelte · TypeScript★ 1↓ 2,440/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI
53Moderatehealth index
Whatsonyourmind/modelforge
Bulge-tier Excel financial model factory — every cell live-formulated, every number traceable
Python★ 1↓ 571/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Go
37At riskhealth index
Wian47/GitSketch
An interactive terminal Git branch and merge visualizer.
Go★ 1Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
51Moderatehealth index
WindowsSov8forUs/sonolus-go
No repository description published.
Go★ 1Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go · crates.io · Hex +5
54Moderatehealth index
WithAutonomi/ant-sdk
No repository description published.
Swift · Rust · Python★ 1Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
crates.io
50Moderatehealth index
WithAutonomi/evmlib
No repository description published.
Rust★ 1↓ 2,626/moJul 14, 2026
No licenseJul 14, 2026 · metrics 1.13.0
npm
51Moderatehealth index
Workday/canvas-icons
Canvas icon infrastructure
TypeScript · JavaScript★ 1Jul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
Packagist
58Moderatehealth index
WyriHaximus/php-get-in-packages-composer.json
Get a specific configuration setting from all installed composer packages
Makefile · PHP★ 1↓ 15.7K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Packagist
56Moderatehealth index
WyriHaximus/php-msgpack
ext-msgpack polyfill using rybakit/msgpack
Makefile★ 1↓ 3,131/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
npm
35At riskhealth index
XRPDomains/xrpl-wallet-kit
No repository description published.
TypeScript★ 1Jul 19, 2026
No licenseJul 19, 2026 · metrics 1.13.0
Go
37At riskhealth index
XposedOrNot/XposedOrNot-Go
Official Go client for the XposedOrNot API - Check data breaches, email exposures, and password leaks
Go★ 1Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go
45At riskhealth index
YONEDASH/tinymock
tinymock is an idiomatic test double generation tool for Go.
Go★ 1Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
57Moderatehealth index
YakDriver/cachegoat
Automatically tames ever-growing Go caches
Go★ 1Jul 22, 2026
MPL-2.0Jul 22, 2026 · metrics 1.13.0
Packagist
52Moderatehealth index
YotpoLtd/magento2-module-core
No repository description published.
PHP★ 1↓ 16.4K/moJul 15, 2026
OSL-3.0Jul 15, 2026 · metrics 1.13.0
Packagist
49At riskhealth index
YotpoLtd/magento2-module-messaging
No repository description published.
PHP · HTML★ 1↓ 10.3K/moJul 21, 2026
OSL-3.0Jul 21, 2026 · metrics 1.13.0
Go
44At riskhealth index
YspCoder/omnigo
No repository description published.
Go★ 1Jul 28, 2026
No licenseJul 28, 2026 · metrics 1.13.0
npm · PyPI
54Moderatehealth index
YugantM/hvtracker-mcp
MCP server for HVTracker trust checks.
Python · JavaScript★ 1↓ 1,309/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go · npm
62Moderatehealth index
YunosukeY/exsqus
Explain Slow Queries
Go · YAML · Shell★ 1Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
26Criticalhealth index
ZGGSONG/PracticalToolkit
No repository description published.
C#★ 1Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0