Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
51,346
Monthly downloads under inspection
398B
Median health index
60 Moderate
51,346 recordsRanked by popularity · browse by tag · record statistics
Packagist
29At Riskhealth index
illuminate/cookie
[READ ONLY] Subtree split of the Illuminate Cookie component (see laravel/framework)
PHP★ 22↓ 96K/moJul 15, 2026
MITJul 15, 2026 · metrics 2.1.0
npm
50Moderatehealth index
inspect-js/is-string
Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.
JavaScript★ 22↓ 324M/moJul 22, 2026
MITJul 22, 2026 · metrics 2.1.0
Packagist
59Moderatehealth index
j0k3r/graby-site-config
Graby site config files
PHP · Makefile★ 22↓ 9,142/moAug 1, 2026
Custom licenseAug 1, 2026 · metrics 2.1.0
npm
60Moderatehealth index
j2inn/haystack-core
Project Haystack core TypeScript library
TypeScript★ 22↓ 14K/moJul 31, 2026
BSD-3-ClauseJul 31, 2026 · metrics 2.1.0
Go
71Goodhealth index
jackchuka/confluence-md
🧭 From Confluence to clean Markdown, images and all — just one command
Go★ 22Jul 21, 2026
MITJul 21, 2026 · metrics 2.1.0
PyPI
59Moderatehealth index
jaraco/tempora
No repository description published.
Python★ 22Jul 19, 2026
No licenseJul 19, 2026 · metrics 2.1.0
npm · Packagist
17Criticalhealth index
javiereguiluz/EasyAdminBundle
The new (and simple) admin generator for Symfony applications.
PHP · Twig★ 22Jul 20, 2026
MITJul 20, 2026 · metrics 2.1.0
npm
22At Riskhealth index
jaystack/odata-v4-sql
OData V4 SQL
JavaScript · TypeScript★ 22↓ 23.1K/moJul 18, 2026
No licenseJul 18, 2026 · metrics 2.1.0
Go · npm
67Goodhealth index
jesposito/Facet
No repository description published.
Svelte · Go★ 22Jul 20, 2026
MITJul 20, 2026 · metrics 2.1.0
Hex
34At Riskhealth index
jjcarstens/extty
Terminal shell emulation as a process
Erlang · Elixir★ 22↓ 3,966/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.1.0
npm
50Moderatehealth index
jsdom/html-encoding-sniffer
Sniff the encoding from a HTML byte stream
JavaScript★ 22↓ 314M/moJul 22, 2026
MITJul 22, 2026 · metrics 2.1.0
npm
36Weakhealth index
jsdom/w3c-xmlserializer
An XML serializer that follows the W3C specification.
JavaScript★ 22↓ 281M/moJul 22, 2026
MITJul 22, 2026 · metrics 2.1.0
RubyGems
54Moderatehealth index
kddnewton/sorbet-eraser
Erase all traces of sorbet-runtime code
Ruby★ 22Jul 20, 2026
MITJul 20, 2026 · metrics 2.1.0
npm
54Moderatehealth index
kelvinschen/acpus
Local durable harness for AI-first workflows
TypeScript · HTML★ 22Jul 16, 2026
MITJul 16, 2026 · metrics 2.1.0
npm
63Moderatehealth index
kenryu42/pi-grok-cli
Use your X Premium or SuperGrok subscription in pi—with automatic vision routing for text-only models.
TypeScript★ 22↓ 2,291/moJul 23, 2026
MITJul 23, 2026 · metrics 2.1.0
Go · Maven · npm
67Goodhealth index
kensa-dev/kensa
A code-first BDD testing framework for Kotlin & Java.
Kotlin · TypeScript★ 22Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.1.0
RubyGems
38Weakhealth index
koic/rubocop-faker
A RuboCop extension for Faker.
Ruby★ 22Jul 20, 2026
MITJul 20, 2026 · metrics 2.1.0
Go · npm
86Excellenthealth index
kptdev/porch
Package Orchestration server for kpt packages
Go★ 22Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 2.1.0
Go
65Goodhealth index
kromiii/tbls-ask-agent-slack
Slack bot for generating sql query based on tbls schema
Go★ 22Jul 15, 2026
MITJul 15, 2026 · metrics 2.1.0
Packagist
34At Riskhealth index
laminas/laminas-mvc-middleware
Dispatch middleware pipelines in place of controllers in laminas-mvc.
PHP★ 22↓ 23K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 2.1.0
crates.io · npm
59Moderatehealth index
larsbrubaker/clipper2-rust
No repository description published.
Rust★ 22↓ 4,681/moJul 23, 2026
BSL-1.0Jul 23, 2026 · metrics 2.1.0
Go
67Goodhealth index
latitudesh/cli
⚙️ Command-Line Interface for Latitude.sh
Go★ 22Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 2.1.0
—
56Moderatehealth index
leanprover-community/import-graph
Tool to analyse the import structure of lean projects.
Lean · HTML★ 22Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.1.0
Go · crates.io · npm +1
65Goodhealth index
liamwh/tree-sitter-wit
Tree Sitter grammar for Web Assembly Interface Types
JavaScript · C · CMake★ 22Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.1.0
npm
69Goodhealth index
ljharb/es-to-primitive
ECMAScript "ToPrimitive" algorithm. Provides ES5 and ES6/ES2015 versions.
JavaScript★ 22↓ 297M/moJul 22, 2026
MITJul 22, 2026 · metrics 2.1.0
Go
71Goodhealth index
lmtani/pumbaa
A companion for the Cromwell Server
Go★ 22Aug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.1.0
npm · PyPI
62Moderatehealth index
lopushok9/agent-layer
A wallet for agents. Make payments via x402, use stablecoins, swap assets, earn yield with defi and buy tokenized stocks across the most popular chains.
Python · HTML · JavaScript★ 22↓ 4,715/moJul 15, 2026
Custom licenseJul 15, 2026 · metrics 2.1.0