Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
47,121
Monthly downloads under inspection
389B
Median health index
57 Moderate
47,121 recordsRanked by popularity · browse by tag · record statistics
Packagist
59Moderatehealth index
web-of-trust/php-privacy
PHP Privacy - The OpenPGP library in PHP language
PHP★ 5↓ 3,534/moJul 14, 2026
BSD-3-ClauseJul 14, 2026 · metrics 1.13.0
RubyGems
72Goodhealth index
webhippie/po_to_json
Ruby library for converting gettext PO files to JSON
Ruby★ 5Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
41At riskhealth index
williamthome/json_polyfill
A polyfill for the OTP json module (EEP68)
Erlang★ 5Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
53Moderatehealth index
windmill-labs/windmill-go-client
No repository description published.
Go · Shell★ 5Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Packagist
50Moderatehealth index
wintercms/wn-cms-module
Read-only mirror of the CMS module for Winter CMS.
PHP★ 5↓ 4,204/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
PyPI
50Moderatehealth index
wirenboard/wb-mqtt-dali
MQTT DALI bridge for Wiren Board
Python★ 5↓ 0/moJul 13, 2026
No licenseJul 13, 2026 · metrics 1.13.0
Go
19Criticalhealth index
witchfindertr/bypass403
bypass403 is tool to bypass 403 Forbidden responses.
Go★ 5Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
31At riskhealth index
wooorm/character-reference-invalid
Map of invalid numeric character references to their replacements, according to HTML
JavaScript★ 5↓ 164M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
32At riskhealth index
wooorm/is-decimal
Check if a character is decimal
JavaScript★ 5↓ 172M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Packagist
51Moderatehealth index
worksome/foggy-laravel
A Laravel wrapper for Foggy
PHP★ 5↓ 6,809/moJul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
npm
41At riskhealth index
x4cc3/pi-xpi
XPI — offensive security tools for Pi Agent: casefile, exploit search, web lookup, code intelligence, todo tracker
TypeScript★ 5↓ 3,589/moJul 15, 2026
No licenseJul 15, 2026 · metrics 1.13.0
41At riskhealth index
xapi-project/stdext
Xenserver's (deprecated) extensions to the ocaml standard library
OCaml★ 5Jul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
npm · NuGet
54Moderatehealth index
xarsh/ooxml-validator
Fast, zero-dependency OOXML validator for Node.js (.docx/.pptx/.xlsx etc.).
TypeScript · C#★ 5↓ 3,876/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
35At riskhealth index
xchacha20-poly1305/cazilla
An alternative CA list solution. From SagerNet, and will to...?
Go★ 5Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Maven
66Moderatehealth index
xdev-software/tci
XDEV's TestContainers Infrastructure (TCI) Framework Basis
Java★ 5Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
56Moderatehealth index
xgo-dev/llvm
Go bindings to a system-installed LLVM. Used as part of LLGo.
Go★ 5Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
21Criticalhealth index
xp44mm/FSharp.Idioms
No repository description published.
F#★ 5Jul 20, 2026
GPL-3.0Jul 20, 2026 · metrics 1.13.0
PyPI
40At riskhealth index
xpring-eng/sidechain-cli
No repository description published.
Python★ 5Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Go
62Moderatehealth index
yaklabco/stave
Because any good wizard has a stave...
Go★ 5Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
55Moderatehealth index
yareeh/goodreads-cli
Command line tool to manage your books in Goodreads
Go★ 5Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
npm
63Moderatehealth index
yeemio/owlcoda
OwlCoda — independent local-first AI coding workbench. Native REPL, 42+ tools, learned skills, GPL-3.0-or-later.
TypeScript★ 5↓ 4,505/moJul 25, 2026
GPL-3.0Jul 25, 2026 · metrics 1.13.0
RubyGems
69Moderatehealth index
yegor256/qbash
Simple executor of a bash commands from Ruby: it logs the output and checks the exit code
Ruby★ 5Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
crates.io
50Moderatehealth index
yfblock/sg200x-bsp
rust crate for sg200x-bsp
Rust★ 5↓ 6,532/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
Go
59Moderatehealth index
ygpkg/yg-go
No repository description published.
Go★ 5Jul 17, 2026
GPL-3.0Jul 17, 2026 · metrics 1.13.0
Packagist
49At riskhealth index
yoanm/php-jsonrpc-server-sdk
Server SDK to convert a json-rpc request string into json-rpc response string
PHP★ 5↓ 3,922/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
PyPI
50Moderatehealth index
youtype/botocore-stubs
Type annotations and code completion for botocore package
Python★ 5Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
57Moderatehealth index
yuusoft-org/rettangoli
No repository description published.
JavaScript · HTML★ 5Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
crates.io · PyPI
56Moderatehealth index
zackees/running-process
A python subprocess replacement written in rust - track zombie processes, launch PTY and more
Rust★ 5↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
Packagist
50Moderatehealth index
zamzar/zamzar-php
PHP file converter library for Zamzar
PHP★ 5↓ 2,361/moJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0