Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
45,882
Monthly downloads under inspection
388B
Median health index
57 Moderate
45,882 recordsRanked by popularity · browse by tag · record statistics
Go
42At riskhealth index
xnacly/go-kagi-translate
A go library for interacting with translate.kagi.com
Go★ 3Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
64Moderatehealth index
xonaman/nodejs-pdfium-native
Native Node.js bindings for PDFium
C++ · C · TypeScript★ 3↓ 8,650/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
61Moderatehealth index
xray-forge/stalker-xrf-xray16-sdk
X-Ray engine 16 type declarations for typescript.
TypeScript★ 3↓ 4,399/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
npm
52Moderatehealth index
yasserstudio/geoalgeria
The open dataset for Algeria — 22 npm packages, 50,000+ records, CI-validated, MIT-licensed. Wilayas, communes, post offices, banks, airports, rail/tram/metro & intercity+urban bus transit, 5G, delivery, tourism & more. JSON, CSV, GeoJSON, SQL, TypeScript. Docs: geoalgeria.com/data
HTML · JavaScript★ 3Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
RubyGems
64Moderatehealth index
yegor256/joined
Ruby gem to join strings together with an AND before the last one
Ruby★ 3Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm · PyPI
53Moderatehealth index
yezhenqing/jupydeep
JupyDeep is an extension app for JupyterLab, your AI partner in Jupyter, powered by Pydantic AI/Agents — and beyond.
TypeScript · CSS · Python★ 3↓ 1,244/moJul 17, 2026
BSD-3-ClauseJul 17, 2026 · metrics 1.13.0
Packagist
30At riskhealth index
yiisoft/code-style
PHP CS Fixer rule sets for Yii packages.
PHP★ 3↓ 11.7K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
Packagist
27Criticalhealth index
yiisoft/psr-emitter
PSR-7 HTTP response emitter
PHP★ 3↓ 10.9K/moJul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
42At riskhealth index
ykocaman/opencode-session-tracker
Real-time TUI sidebar & Telegram companion for OpenCode. Track active sessions, nested subagents, dynamic statuses, and authorize commands from your phone.
TypeScript★ 3↓ 2,589/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go · npm
55Moderatehealth index
yokanater/spotr
Gym logging for nerds
Go★ 3Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
npm
69Moderatehealth index
yoshinani-dev/style-guide
YOSHINANI's engineering style guide
JavaScript★ 3↓ 2,238/moJul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm · crates.io
58Moderatehealth index
youdie006/swapdex
Switch between multiple Claude Code and Codex login accounts, locally and safely. A switcher, not a rotator.
Rust★ 3↓ 16.2K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
56Moderatehealth index
yourconscience/dotagents
Dotfiles for your AI agents: one ~/.agents repo for skills, MCP servers, hooks, and subagent roles — synced to Claude Code, Codex, Droid, Hermes, and Pi. Commit-pinned and audited.
Go · Python★ 3Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
PyPI
47At riskhealth index
youtype/types-awscrt
Type annotations for awscrt package
Python★ 3↓ 52.6M/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm
50Moderatehealth index
yuda-lyu/wsemi
A support package for web developer.
JavaScript★ 3↓ 41.2K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
npm
60Moderatehealth index
yunxu1019/efront
前端集成开发测试环境
JavaScript★ 3↓ 21.5K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
62Moderatehealth index
ywatanabe1989/scitex-writer
LaTeX manuscript compilation for scientific documents, with MCP server
Python · JavaScript · TeX★ 3Jul 16, 2026
AGPL-3.0Jul 16, 2026 · metrics 1.13.0
RubyGems
47At riskhealth index
zed-0xff/iostruct
A Struct that can read/write itself from/to IO-like objects
Ruby★ 3Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
52Moderatehealth index
zenlayer/zenlayercloud-sdk-go
Zenlayer Cloud API 2.0 SDK for Golang
Go★ 3Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
ziffmedia/laravel-mysql-snapshots
Laravel package for creating MySQL Snapshots with command line tools mysqldump, mysql, etc.
PHP★ 3↓ 4,035/moJul 19, 2026
No licenseJul 19, 2026 · metrics 1.13.0
PyPI
55Moderatehealth index
zigpy/zigpy-ziggurat
Zigpy radio library for communicating with the Ziggurat stack
Python★ 3Jul 28, 2026
No licenseJul 28, 2026 · metrics 1.13.0
npm
52Moderatehealth index
zirkelc/serverless-exports-plugin
Serverless plugin to export environment variables and stack outputs
TypeScript★ 3↓ 5,811/moJul 29, 2026
MITJul 29, 2026 · metrics 1.13.0
Maven · npm
33At riskhealth index
zjarlin/addzero-lib-jvm
No repository description published.
Kotlin · Java★ 3Jul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
crates.io
58Moderatehealth index
zommiommy/common_traits
Rust traits I write way too often
Rust★ 3↓ 28.9K/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm
58Moderatehealth index
zss-in-js/zss-engine
A CSS-in-JS transpiler engine for building zero-runtime stylesheets at build time.
TypeScript★ 3↓ 2,363/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
50Moderatehealth index
zytera/better-auth-sdk-go
No repository description published.
Go★ 3Jul 17, 2026
GPL-3.0Jul 17, 2026 · metrics 1.13.0
npm
56Moderatehealth index
zyx77550/sparda
Turn any Express/FastAPI app into an MCP server, in one command.
JavaScript★ 3↓ 3,844/moJul 15, 2026
Custom licenseJul 15, 2026 · metrics 1.13.0
npm
50Moderatehealth index
0disoft/universal-config-engine
A deterministic local configuration resolution engine with value-level provenance tracking, validation boundaries, and secret redaction for TypeScript/Node.js.
TypeScript · JavaScript★ 2Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
53Moderatehealth index
0rkz/byte-mcp-server
MCP server for PayPerByte — pay-per-call USDC data feeds for AI agents (x402 on Base; EIP-712 attestations). No API keys, no token.
JavaScript · TypeScript★ 2↓ 2,506/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
43At riskhealth index
11lunaric11/securitychecker
Recon tool for pentesters & bug bounty hunters: check robots.txt, security.txt (RFC 9116) and /.well-known/ across many targets. CLI + web UI, single static Go binary.
Go · HTML★ 2Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0