Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
70,903
Monthly downloads under inspection
619B
Median health index
60 Moderate
70,903 recordsRanked by popularity · browse by tag · record statistics
npm
53Moderatehealth index
Yangeyu/lazysql
No repository description published.
TypeScript★ 0↓ 1,426/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Pendinghealth index
YantramOps/yantramops-sdk
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
48Weakhealth index
Yarnadori/bnm
No repository description published.
Go★ 0Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
9Criticalhealth index
YesWeAreBot/adapter-manager
yes-core 核心插件:快速构建群聊响应,跨平台。
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
Go
22At Riskhealth index
YesWeAreBot/go-Pichubot
a package for CQhttp(OneBot) in golang
Go★ 0Sep 10, 2026
AGPL-3.0Sep 10, 2026 · metrics 2.10.0
Go
10Criticalhealth index
YesWeAreBot/yes-core
A very tiny framework for any extendable event-driven system.
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
NuGet
39Weakhealth index
YiQiDong/YiQiDong
易启动是一个方便交付人员和运维人员部署应用、管理服务器的软件。提供了企业软件部署、文件管理、进程管理、模拟终端、HTTP反向代理等实用功能。
C# · HTML★ 0Sep 9, 2026
No licenseSep 9, 2026 · metrics 2.10.0
Packagist
71Goodhealth index
YiiRocks/recaptcha
reCAPTCHA bot protection and online fraud prevention
PHP★ 0↓ 1,669/moAug 22, 2026
BSD-3-ClauseAug 22, 2026 · metrics 2.10.0
35Weakhealth index
YiminJin/aspect
A parallel, extensible finite element code to simulate convection in both 2D and 3D models.
C++★ 0Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm · Go
56Moderatehealth index
YingSuiAI/dirextalk-connect
Bridge local AI coding agents (Claude Code, Cursor, Gemini CLI, Codex) to messaging platforms (Direxio). Chat with your AI dev assistant from anywhere — no public IP required for most platforms.
Go★ 0↓ 357/moSep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
Pendinghealth index
YoWASP/clang
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Pendinghealth index
YoWASP/yosys
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Packagist
23At Riskhealth index
Yoast-dist/duplicate-post
No repository description published.
PHP★ 0↓ 3,750/moSep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
53Moderatehealth index
Yolean/y-cluster
No repository description published.
Go · Shell★ 0Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
npm
56Moderatehealth index
YonasValentin/claude-kimi-relay
Claude Code plugin that delegates code review, adversarial design critique, and isolated implementation to Kimi Code over the Agent Client Protocol (ACP). Security-first: Kimi works in an isolated workspace and hands back a Git patch.
TypeScript★ 0↓ 3,367/moAug 30, 2026
Apache-2.0Aug 30, 2026 · metrics 2.10.0
Pendinghealth index
YorCreative/Laravel-Scrubber
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
65Goodhealth index
YosefHayim/fresh-squeezy
CLI and TypeScript library for validating Lemon Squeezy billing setup in local checks and CI.
TypeScript★ 0↓ 1,393/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Packagist
56Moderatehealth index
YotpoLtd/magento2-module-reviews
No repository description published.
PHP · HTML★ 0↓ 17.4K/moSep 9, 2026
OSL-3.0Sep 9, 2026 · metrics 2.10.0
npm
22At Riskhealth index
You-saku/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Pendinghealth index
YounndAI/lyt
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
39Weakhealth index
Yoven/AnhurDB-SDK
No repository description published.
Python · Go · TypeScript★ 0Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
27At Riskhealth index
YuClawLab/yuclaw-trust
SHA-256 hash-chain audit log for YUCLAW research signals. Git-anchored — clone and verify independently.
Python · Circom★ 0Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
YuZhengM/sciv
SCIV algorithm
Python★ 0↓ 1,850/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
NuGet
53Moderatehealth index
Yuck/YuckQi
A .NET solution of lightweight, composable libraries for domain modeling, data access, and mapping. Use handler-based data abstractions to build repositories and services against SQL, document stores, or in-memory backends.
C#★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
38Weakhealth index
YujiSuzuki/hostmcp
HostMCP: Controlled host OS access for AI agents via MCP
Go★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
39Weakhealth index
YujiSuzuki/sandbox-mcp
Stdio MCP server for AI sandbox containers — auto-discovers and exposes shell scripts and Go tools as MCP tools
Go★ 0Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0