Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,777
Monthly downloads under inspection
547B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,400 recordsRanked by popularity · browse by tag · record statistics
npm
3Criticalhealth index
Vue · JavaScript · CSS★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
2Criticalhealth index
retributions/Zephyrus
Icba, most updated version rn, pretty cool ngl
Python★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
2Criticalhealth index
retributions/retributions
No repository description published.
Mixed★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
Go
8Criticalhealth index
rezakargar/go-clockwork
A Go port of Clockwork — the PHP debugging toolbar and request inspector that works with the Clockwork browser extension.
Go★ 1Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
4Criticalhealth index
rivet-design/rivet
Visual AI editor for product designers
Mixed★ 1Sep 8, 2026
No licenseSep 8, 2026 · metrics 2.10.0
crates.io · Go · npm +1
29At Riskhealth index
rizinorg/rizin-grammar-c
C grammar for tree-sitter
JavaScript★ 1Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
Go
13Criticalhealth index
robottwo/gsh_prime
A modern, POSIX-compatible, generative shell
Go★ 1Aug 13, 2026
GPL-3.0Aug 13, 2026 · metrics 2.10.0
32At Riskhealth index
rok-cesnovar/math
The Stan Math Library is a C++ template library for automatic differentiation of any order using forward, reverse, and mixed modes. It includes a range of built-in functions for probabilistic modeling, linear algebra, and equation solving.
C++★ 1Jul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 2.10.0
Go
10Criticalhealth index
romanSPB15/tui-compose
Легковесный TUI-фреймворк для Go
Go★ 1Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Go
8Criticalhealth index
romanspb15/go-tui
Легковесный TUI-фреймворк для Go
Go★ 1Jul 19, 2026
MITJul 19, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
ronaldoussoren/cpython
The Python programming language
Python · C★ 1Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
Go
19Criticalhealth index
ronhuafeng/codexsdk-go
Archived: use github.com/ronhuafeng/llm-go/codexsdk; legacy v0.5.1 is immutable
Go · Python★ 1Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Go
19Criticalhealth index
sacloud/monitoring-suite-api-go
Go言語向け さくらのクラウド モニタリングスイート APIライブラリ
Go★ 1Aug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
Maven
2Criticalhealth index
sakweli/FemaBot
No repository description published.
Java★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
Maven
2Criticalhealth index
sakweli/StudentSims-Must
No repository description published.
Java★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
NuGet
12Criticalhealth index
santedb/santeguard
SanteGuard Audit Repository
JavaScript★ 1Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
23At Riskhealth index
scheibelp/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
Python★ 1Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
npm
14Criticalhealth index
shinyoshiaki/werift-dtls
DTLS v1.2 server/client Implementation for TypeScript
TypeScript★ 1Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
Go
30At Riskhealth index
shizhMSFT/notation
No repository description published.
Go★ 1Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/go-web-exact
Webコンテンツ解析
Go★ 1Aug 30, 2026
MITAug 30, 2026 · metrics 2.10.0
Packagist · npm
33At Riskhealth index
silverstripe/documentation-lint
Abstraction around various linters for easy documentation linting for use in Silverstripe CMS supported modules
Shell · JavaScript★ 1↓ 2,654/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
19Criticalhealth index
sjmudd/gh-ost
GitHub's Online Schema Change for MySQL
Go★ 1Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
Go
34At Riskhealth index
skarm/kalkan
Go API for KalkanCrypt SDK and the national cryptographic standards of the Republic of Kazakhstan: CMS, XML/WS-Security signatures, hashing, certificates, OCSP/TSA, and ZIP containers.
Go★ 1Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
socketry/sus-fixtures-async
No repository description published.
Ruby★ 1Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
Packagist
34At Riskhealth index
spiral/session
[READ ONLY] Secure sessions over native PHP handlers. Subtree split of the Spiral Session component (see spiral/framework)
PHP★ 1↓ 2,312/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
19Criticalhealth index
starnop/cri-tools
CLI and validation tools for Kubelet Container Runtime Interface (CRI) .
Go★ 1Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
npm
23At Riskhealth index
stevepeak/gmail.js
Gmail JavaScript API
JavaScript★ 1Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0