Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,405
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
10,010 recordsRanked by popularity · browse by tag · record statistics
Go
23At Riskhealth index
shizhMSFT/distribution
The toolkit to pack, ship, store, and deliver container content
Go★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
20At Riskhealth index
shogotsuneto/jwks-mock-api
No repository description published.
Go★ 0Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
—
5Criticalhealth index
shoprag/genius
Public boundary notice for the private BitGenius product and open ShopRAG components
Mixed★ 0Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
Go · npm
17Criticalhealth index
shorim/cli
Simple set of commands to manage a Kyma installation
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/ap-chain
LLMマルチステップパイプライン
Go★ 0Sep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/ap-manga-web
画像生成オーケストレーター
Go · HTML★ 0Sep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/clibase
cobraベースのCLI共通基盤
Go★ 0Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/gemini-image-kit
画像生成ツールキット
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
17Criticalhealth index
shouni/git-gemini-cli
AIレビューCLI
Go★ 0Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/git-gemini-web
レビューオーケストレーター
Go · HTML★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
18Criticalhealth index
shouni/go-manga-kit
漫画生成ツールキット
Go★ 0Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
21At Riskhealth index
significance/swarm
Swarm: Censorship resistant storage and communication infrastructure for a truly sovereign digital society
Go★ 0Sep 17, 2026
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
sigp/libmdbx-rs
Rust bindings for MDBX
C · C++★ 0Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
Packagist
22At Riskhealth index
simPod/orm
Doctrine Object Relational Mapper (ORM)
PHP★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
7Criticalhealth index
sinashahoveisi/resilium
Composable resilience policies for Go — retry, circuit breaker, timeout, and rate limiting behind a single type-safe API.
Go★ 0Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
7Criticalhealth index
sinashahoveisi/typecfg
Type-safe Go config loader with generics, hot reload, and precise field-level errors — no reflection-heavy dependencies like viper.
Go★ 0Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
14Criticalhealth index
sineer/docker-zfs-plugin
Docker volume plugin for creating persistent volumes as a dedicated zfs dataset.
Go · Shell★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
14Criticalhealth index
sinfactura/types
No repository description published.
TypeScript★ 0Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
17Criticalhealth index
singhravipratap/websocket
Minimal and idiomatic WebSocket library for Go
Go★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
6Criticalhealth index
sirkon/msgpunsafe
Unsafe routines for msgpack decoding.
Go★ 0Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
sisshiki1969/rust-smallvec
"Small vector" optimization for Rust: store up to a small number of items on the stack
Rust★ 0Sep 24, 2026
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
19Criticalhealth index
sivaosorg/replify
replify · A Go library to simplify and standardize API response wrapping for RESTful services.
Go★ 0Sep 17, 2026
GPL-3.0Sep 17, 2026 · metrics 2.10.0
crates.io
11Criticalhealth index
skade/just
🤖 Just a command runner
Rust★ 0Aug 23, 2026
No licenseAug 23, 2026 · metrics 2.10.0
Go · npm
17Criticalhealth index
skhalash/cli
Simple set of commands to manage a Kyma installation
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
21At Riskhealth index
skosukhin/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
Python★ 0Sep 13, 2026
LGPL-2.1Sep 13, 2026 · metrics 2.10.0
Go
17Criticalhealth index
skyisfuck/websocket
Minimal and idiomatic WebSocket library for Go
Go★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
20At Riskhealth index
skylenet/swarm
Swarm: Censorship resistant storage and communication infrastructure for a truly sovereign digital society
Go★ 0Sep 17, 2026
LGPL-3.0Sep 17, 2026 · metrics 2.10.0
—
19Criticalhealth index
skysec/cni
Container Network Interface - networking for Linux containers
Go★ 0Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0