Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
40,791
Monthly downloads under inspection
382B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,182 recordsRanked by popularity · browse by tag · record statistics
Go
28Criticalhealth index
ssvlabs/ssv-pulse
No repository description published.
Go★ 0Jul 23, 2026
GPL-3.0Jul 23, 2026 · metrics 1.13.0
crates.io
21Criticalhealth index
stepancheg/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
28Criticalhealth index
stephenfin/gophercloud
Gophercloud: an OpenStack SDK for Go
Go★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
PyPI
36At riskhealth index
strandgren/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
Go
31At riskhealth index
superhx/rocketmq-client-go
Apache RocketMQ go client
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm
37At riskhealth index
svetlanabrennan/opentelemetry-js
OpenTelemetry JavaScript Client
TypeScript★ 0↓ 32K/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
17Criticalhealth index
sysback/s-ui
An advanced Web Panel • Built for SagerNet/Sing-Box
Go · Shell★ 0Jul 21, 2026
GPL-3.0Jul 21, 2026 · metrics 1.13.0
crates.io
28Criticalhealth index
taiki-e/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
27Criticalhealth index
tarantool/go-openssl
OpenSSL bindings for Go
Go · C★ 0Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 1.13.0
crates.io
21Criticalhealth index
tarcieri/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
PyPI
37At riskhealth index
tgamblin/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
crates.io · PyPI
15Criticalhealth index
theseus-os/x86_64
Library to program x86_64 hardware.
Rust★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go · npm
17Criticalhealth index
threefoldtecharchive/tfexplorer
No repository description published.
Go★ 0Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
crates.io
28Criticalhealth index
tnull/rust-lightning
Rust-Lightning, not Rusty's Lightning
Rust★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
Go
30At riskhealth index
toddboom/telegraf
The plugin-driven server agent for collecting & reporting metrics.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
17Criticalhealth index
tokers/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
C★ 0Jul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0
Go
27Criticalhealth index
tomasaschan/kpt-config-sync
ConfigSync - used to sync Git, OCI and Helm charts to your clusters. Part of KPT.
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
PyPI
22Criticalhealth index
toncho11/moabb
Mother of All BCI Benchmarks
Python★ 0Jul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 1.13.0
Go
20Criticalhealth index
tovala/embedded-postgres
Run a real Postgres database locally on Linux, OSX or Windows as part of another Go application or test
Go★ 0Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
23Criticalhealth index
tparker-usgs/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
20Criticalhealth index
trws/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
PyPI
33At riskhealth index
tsukada-cs/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
npm · Maven
32At riskhealth index
valitydev/damsel
📤👷‍♀️📥
Thrift★ 0↓ 2,120/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
22Criticalhealth index
victorusu/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
Go · npm
28Criticalhealth index
vinckr/oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
Go · Mustache★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Packagist · npm
20Criticalhealth index
visualbuilder/filament-tinyeditor
a TineMce editor for Laravel Filament Forms
PHP · JavaScript★ 0↓ 3,099/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
29Criticalhealth index
voiceflow/backend-utils
express middleware for route wrapping
TypeScript★ 0↓ 5,676/moJul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0