Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
70,668
Monthly downloads under inspection
608B
Median health index
60 Moderate
70,668 recordsRanked by popularity · browse by tag · record statistics
Pendinghealth index
wecode-team/wequicksandbox
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Packagist · npm
57Moderatehealth index
wedevelopnl/silverstripe-e2e
No repository description published.
PHP★ 0↓ 2,255/moAug 20, 2026
BSD-3-ClauseAug 20, 2026 · metrics 2.10.0
npm · PyPI · Go +2
33At Riskhealth index
weeasycrypto/sdk
Official TypeScript SDK for the WeEasyCrypto tenant API — zero-dependency, WebCrypto-based, edge-runtime ready
TypeScript · Java · Python★ 0↓ 39/moSep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
57Moderatehealth index
weeb-vip/anime-api
golang anime api with graphql
Go★ 0Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
Go
31At Riskhealth index
weedbox/storage-modules
No repository description published.
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
23At Riskhealth index
week-book/apikeys
No repository description published.
Go★ 0Sep 8, 2026
No licenseSep 8, 2026 · metrics 2.10.0
17Criticalhealth index
wefi-ai/ekyc-suite-mcp
eKYC Suite is a financial-grade identity verification MCP Server that provides 8 AI-powered biometric and document verification capabilities for AI agents.
Mixed★ 0Aug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
npm
53Moderatehealth index
weijia/zen-fs-remotestoragejs
No repository description published.
TypeScript★ 0↓ 2,425/moAug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Pendinghealth index
weizhenye/Danmaku
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Pendinghealth index
weizhonzhen/FastData.Core
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
18Criticalhealth index
wellykrisnabayu/shared-proto
No repository description published.
Mixed★ 0Aug 8, 2026
No licenseAug 8, 2026 · metrics 2.10.0
Go
62Moderatehealth index
welworx/flatex-fetch
CLI that logs into flatex.at and downloads document-archive PDFs (trade confirmations, dividend notices, and more)
Go★ 0Aug 12, 2026
MITAug 12, 2026 · metrics 2.10.0
Pendinghealth index
wemap/wemap-modules-js
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
62Moderatehealth index
wenayr/wenay-common2
No repository description published.
TypeScript · JavaScript★ 0↓ 5,272/moSep 6, 2026
ISCSep 6, 2026 · metrics 2.10.0
Maven
50Moderatehealth index
wenbin-wb/ypbin-starter
企业级 Spring Boot 3 框架库——统一响应、鉴权、缓存、多租户、数据权限、日志审计与可观测,单体与微服务同源,约定优于配置。
Java★ 0Aug 25, 2026
Apache-2.0Aug 25, 2026 · metrics 2.10.0
Go
45Weakhealth index
weni-ai/rapidpro-archiver
GoLang process responsible for creating RapidPro archives
Go★ 0Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
Go
27At Riskhealth index
wentf9/pulse
PulseAudio client implementation in pure Go
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
21At Riskhealth index
werne2j/argocd-vault-plugin
An ArgoCD plugin to retrieve secrets from Hashicorp Vault and inject them into Kubernetes secrets
Go★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Pendinghealth index
westeuropeco/martha
No repository description published.
Mixed★ 0↓ 0/moNot scanned yet
No licenseAwaiting first inspection
Go
45Weakhealth index
westonsteimel/grype
A vulnerability scanner for container images and filesystems
Go★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
41Weakhealth index
westonsteimel/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Go★ 0Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Pendinghealth index
wetravel-com/rspec-grape
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Pendinghealth index
wevm/frog
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Pendinghealth index
wevm/vocs
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
PyPI
48Weakhealth index
Python★ 0↓ 5,260/moAug 22, 2026
GPL-3.0Aug 22, 2026 · metrics 2.10.0
npm
45Weakhealth index
wharfkit/abicache
ABI Caching Mechanism for use in Session and Contract Kits
TypeScript · JavaScript · Makefile★ 0↓ 9,650/moAug 25, 2026
Custom licenseAug 25, 2026 · metrics 2.10.0
npm
48Weakhealth index
wharfkit/protocol-esr
No repository description published.
TypeScript★ 0↓ 4,567/moAug 5, 2026
Custom licenseAug 5, 2026 · metrics 2.10.0