Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,508
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,017 recordsRanked by popularity · browse by tag · record statistics
Go
15Criticalhealth index
oliverisaac/s3www
Serve static files from any S3 compatible object storage services (Let's Encrypt ready)
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · npm
6Criticalhealth index
omahs/oracle-node
No repository description published.
Go★ 0Oct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
npm
34At Riskhealth index
omnicajs/eslint-plugin-dependencies
ESLint plugin for sorting and structuring import and export declarations.
TypeScript★ 0↓ 9,436/moSep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
omribahumi/async-profiler
Sampling CPU and HEAP profiler for Java featuring AsyncGetCallTrace + perf_events
C++ · Java★ 0Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
14Criticalhealth index
oneslash/goka
Goka is a compact yet powerful distributed stream processing library for Apache Kafka written in Go.
Go★ 0Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
26At Riskhealth index
onestep/gmail.js
Gmail JavaScript API
JavaScript★ 0Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
15Criticalhealth index
openlattice/redux-reqseq
No repository description published.
JavaScript★ 0↓ 76/moSep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go · crates.io
12Criticalhealth index
openrequestprotocol/orp
An open, federated protocol for recipient-sovereign requests.
Rust · Go★ 0Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
opf/omniauth
OmniAuth is a flexible authentication system utilizing Rack middleware.
Ruby★ 0Oct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
Go
18Criticalhealth index
orn688/pat
Performance Analysis Toolbox for Go programs.
Go★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
oroinc/gridfs-config
OroGridFsConfigBundle provides configuration enhancements for Oro applications to enable usage of GridFS Documentation as filesystem.
PHP · Rich Text Format★ 0↓ 5,996/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
Go
19Criticalhealth index
osac-project/fulfillment-cli
Cloud-in-a-box fulfillment CLI
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
19Criticalhealth index
oscarsaleta/PBala
PVM parallellization interface for single threaded scripts. This software allows to distribute executions in PVM enabled clusters using single program multiple data paradigm.
C★ 0Oct 19, 2026
GPL-3.0Oct 19, 2026 · metrics 2.10.0
Go
10Criticalhealth index
osmoview/systemctl
access to systemctl commands
Go★ 0Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
—
15Criticalhealth index
ouotuo/go-knife
No repository description published.
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
—
19Criticalhealth index
owtaylor/distribution
The Docker toolset to pack, ship, store, and deliver content
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · npm
5Criticalhealth index
ozonpharm/zebra
No repository description published.
Go · Vue★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go · npm
28At Riskhealth index
p2p-org/cosmos-sdk
:chains: A Framework for Building High Value Public Blockchains :sparkles:
Go★ 0Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
12Criticalhealth index
packrat386/ynal
moved to https://codeberg.org/packrat386/ynal
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm · NuGet
12Criticalhealth index
pagopa-archive/io-functions-cgn
No repository description published.
TypeScript★ 0Oct 3, 2026
No licenseOct 3, 2026 · metrics 2.10.0
crates.io
10Criticalhealth index
paiml/batuta-common
MOVED → https://github.com/paiml/aprender (crates/aprender-common)
Rust★ 0↓ 17.1K/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
panorama-ed/panolint
Rules for linting ruby code at Panorama Education
Ruby★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0