Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
40,791
Monthly downloads under inspection
382B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,182 recordsRanked by popularity · browse by tag · record statistics
Go
31At riskhealth index
laurazard/compose
Define and run multi-container applications with Docker
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm
34At riskhealth index
legendecas/opentelemetry-js
OpenTelemetry API for Javascript (both Node and browser)
TypeScript★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
PyPI
19Criticalhealth index
leoleojie/RecBole
A unified, comprehensive and efficient recommendation library
Python · Jupyter Notebook★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
23Criticalhealth index
live-change/pattern
real-time event pattern matching
JavaScript★ 0↓ 2,204/moJul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
22Criticalhealth index
lkmcs/telegraf
The plugin-driven server agent for collecting & reporting metrics.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
npm
23Criticalhealth index
lucasbrunozup/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
31At riskhealth index
luhring/grype
A vulnerability scanner for container images and filesystems
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
26Criticalhealth index
luhring/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
27Criticalhealth index
luxfi/version
No repository description published.
Go★ 0Jul 20, 2026
BSD-3-ClauseJul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
mMosiur/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
25Criticalhealth index
manifoldfinance/mev-geth
Go implementation of MEV-Auction for Ethereum
Go★ 0Jul 25, 2026
LGPL-3.0Jul 25, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
manucarran/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
npm
38At riskhealth index
martinkuba/opentelemetry-js
OpenTelemetry JavaScript Client
TypeScript★ 0↓ 32K/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
22Criticalhealth index
martinmodrak/math
Stan Math Library
C++★ 0Jul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 1.13.0
npm
16Criticalhealth index
mashangrong/IPAddress
Java library for handling IP addresses and subnets, both IPv4 and IPv6
Java★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
19Criticalhealth index
maxim0r/fsm
No repository description published.
Go★ 0Jul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0
Go
7Criticalhealth index
mcbalaam/ebitter
a set of things for making games with ebitengine
Go★ 0Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
npm
25Criticalhealth index
mehcode/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
26Criticalhealth index
mei-rune/gosnmp
An SNMP library written in GoLang.
Go★ 0Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
RubyGems
45At riskhealth index
metanorma/metanorma-utils
Utilities methods for metanorma stack
Ruby★ 0Jul 20, 2026
BSD-2-ClauseJul 20, 2026 · metrics 1.13.0
npm
26Criticalhealth index
metcoder95/undici
An HTTP/1.1 client, written from scratch for Node.js
JavaScript★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
meteoswiss-mdr/satpy
Python for weather satellite data
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
NuGet
14Criticalhealth index
micro-elements/MicroElements.Shared
Source only packages: Assertions, Collections, Reflections, Formatting and more
C#★ 0Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
21Criticalhealth index
mikealmond/html5-boilerplate
A professional front-end template for building fast, robust, and adaptable web apps or sites.
JavaScript★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
28Criticalhealth index
milkpirate/assh
:computer: make your ssh client smarter
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0