Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,107
Monthly downloads under inspection
622B
Median health index
59 Moderate
25,273 recordsRanked by popularity · browse by tag · record statistics
npm
65Goodhealth index
varjak/polygon-intersection-helper
A polygon intersection algorithm written in Typescript.
TypeScript★ 4↓ 741/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
78Goodhealth index
verdaccio/e2e-tests
A standalone CLI tool that runs the full Verdaccio e2e test suite against any running registry
TypeScript★ 4↓ 16.4K/moSep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
PyPI · npm
62Moderatehealth index
vmware-skills/VMware-NSX-Security
VMware NSX DFW microsegmentation and security: distributed firewall, security groups, tags, traceflow, IDPS — MCP tools for AI agents
Python★ 4↓ 1,848/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
77Goodhealth index
voku/agent-loop
♾️ Umbrella php package and unified CLI for the governed agentic-coding loop: board (kanban), learning, and recall-compiler.
PHP★ 4↓ 3,672/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
69Goodhealth index
vvka-141/pgmi
PostgreSQL-native deployment tool where deploy.sql controls transactions, execution order, tests, and error handling.
Go · PLpgSQL★ 4Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
PyPI
75Goodhealth index
wan9yu/cli-agent-runner
Keep agent CLIs running 7×24 — supervise Claude Code / aider / any prompt-arg agent with 11-layer defenses and structured observability.
Python★ 4↓ 3,723/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
59Moderatehealth index
wappsto/javascript-wappsto-wapp
A JavaScript API for the Wappsto Wapp
TypeScript★ 4↓ 2,049/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
69Goodhealth index
wasilibs/go-protoc-gen-grpc
Code generator plugins for default grpc languages buildable with Go
Go · Dockerfile★ 4Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
NuGet
53Moderatehealth index
wdolek/w4k-aspnetcore-correlator
Correlator, ASP.NET middleware for handling correlation/request ID.
C#★ 4Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
38Weakhealth index
weilun-shrimp/wlgows
No repository description published.
Go★ 4Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
45Weakhealth index
wikimedia/WrappedString
Mirror of https://gerrit.wikimedia.org/g/WrappedString. See https://www.mediawiki.org/wiki/Developer_access for contributing.
PHP★ 4↓ 13K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Packagist
44Weakhealth index
wikimedia/mediawiki-libs-ScopedCallback
Class for asserting that a callback happens when a dummy object leaves scope. Mirror from https://gerrit.wikimedia.org/g/mediawiki/libs/ScopedCallback - our actual code is hosted with Gerrit (please see https://www.mediawiki.org/wiki/Developer_access for contributing)
PHP★ 4↓ 23.2K/moSep 17, 2026
GPL-2.0Sep 17, 2026 · metrics 2.10.0
Packagist
45Weakhealth index
wikimedia/mediawiki-libs-Zest
Mirror of https://gerrit.wikimedia.org/g/mediawiki/libs/Zest - Please see https://www.mediawiki.org/wiki/Developer_access for contributing.
PHP★ 4↓ 19.9K/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
npm
60Moderatehealth index
wmfs/asl-choice-processor
For determining the next state given an Amazon States Language "Choices" definition and a set of values.
JavaScript★ 4↓ 1,517/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
56Moderatehealth index
wmfs/tymly-core
An open framework for building digital services.
JavaScript★ 4↓ 2,743/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
28At Riskhealth index
wooorm/character-entities-html4
Map of named character references from HTML 4
JavaScript★ 4↓ 166M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
31At Riskhealth index
wooorm/is-alphabetical
Check if a character is alphabetical
JavaScript★ 4↓ 190M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
wuxuedaifu/vllm-surya-ocr
OpenAI-compatible, vLLM-served OCR API for the Surya-OCR-2 model — multilingual document OCR (layout + text recognition) with request batching, a local CLI, and Docker packaging.
Python★ 4Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
wycto/dsh-token-usage
基于dsh的token用量统计,DSH的Token用量统计功能
JavaScript★ 4↓ 1,128/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
42Weakhealth index
xfeldman/aegisvm
Local, scale-to-zero microVM runtime for autonomous agent workloads
Go · Svelte★ 4Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
53Moderatehealth index
xmc-rs/xmc4300
XMC4300 Peripheral interface library generated from an SVD
Rust★ 4↓ 102/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
81Excellenthealth index
xmidt-org/wrp-go
go implementation of the Web Routing Protocol
Go★ 4Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io · Go · npm
73Goodhealth index
xraph/farp
An API Gateway/Service Registration and Discovery Manifest Protocol
Go · Rust · TypeScript★ 4↓ 95/moSep 21, 2026
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Go
77Goodhealth index
yarrasys/kdbx
Per-project secrets in local KeePassXC vaults, injected into commands without ever printing them. Agent-safe: PreToolUse guard hook + read-only MCP server. Single Go binary.
Go★ 4Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
PyPI
77Goodhealth index
yeaboi-ai/yeaboi.ai
yeaboi — AI Scrum Master in your terminal: sprint planning, standups, retros, planning poker, 1:1s and delivery reports for your team, plus cost, daily digests and security posture for the AI coding agents working alongside it.
Python★ 4↓ 9,133/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
60Moderatehealth index
youyo/logvalet
No repository description published.
Go★ 4Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
NuGet
21At Riskhealth index
yoyoboot/Yoyo.Abp
Enhanced ASP.NET Boilerplate is an open-source fork of the original ASP.NET Boilerplate framework that introduces flexible primary key types for entities.
C#★ 4Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
PyPI · npm
48Weakhealth index
yu314-coder/python_to_binary
Pure-Python Python-to-C, native ELF/PE/Mach-O compiler, and CPython application bundler
Python★ 4Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
42Weakhealth index
yusei36/FluentPassFinder
KeePass Plugin with a Fluent Design search window to quickly find entries and autotype or copy passwords and other fields. A global shortcut opens the search window from anywhere.
C#★ 4Sep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0