Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,702
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,309 recordsRanked by popularity · browse by tag · record statistics
PyPI
16Criticalhealth index
plusultra-tools/awesome-eu-compliance-tooling
[ARCHIVED 2026-05-20] Curated list of EU compliance tooling. Archived per portfolio consolidation; venture stays as reference. See: github.com/plusultra-tools/regulatory-changelog-rss for active maintenance.
Python★ 1Aug 4, 2026
Custom licenseAug 4, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
power4j/fckit
No repository description published.
Java★ 1Sep 5, 2026
LGPL-3.0Sep 5, 2026 · metrics 2.10.0
21At Riskhealth index
prusnak/nix-bitcoin
A collection of Nix packages and NixOS modules for easily installing full-featured Bitcoin nodes with an emphasis on security.
Nix★ 1Jul 22, 2026
MITJul 22, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
pubid/pubid-bsi
BSI Publication Identifiers
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
pubid/pubid-cen
CEN/CENELEC Publication Identifiers
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
pubid/pubid-core
No repository description published.
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
pubid/pubid-ieee
PubID spec and implementation for IEEE deliverables
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
pubid/pubid-iso
Implementation of ISO pubid
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
pubid/pubid-nist
No repository description published.
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
Go
14Criticalhealth index
pvotal-tech/openweathermap
Go (golang) package for use with openweathermap.org's API.
Go★ 1Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
8Criticalhealth index
qbit-spark/INSTANTLY-SMS-CATCH
No repository description published.
Java★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
npm
3Criticalhealth index
Vue · JavaScript · CSS★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
4Criticalhealth index
rivet-design/rivet
Visual AI editor for product designers
Mixed★ 1Jul 15, 2026
No licenseJul 15, 2026 · metrics 2.10.0
crates.io · Go · npm +1
29At Riskhealth index
rizinorg/rizin-grammar-c
C grammar for tree-sitter
JavaScript★ 1Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
Go
13Criticalhealth index
robottwo/gsh_prime
A modern, POSIX-compatible, generative shell
Go★ 1Aug 13, 2026
GPL-3.0Aug 13, 2026 · metrics 2.10.0
32At Riskhealth index
rok-cesnovar/math
The Stan Math Library is a C++ template library for automatic differentiation of any order using forward, reverse, and mixed modes. It includes a range of built-in functions for probabilistic modeling, linear algebra, and equation solving.
C++★ 1Jul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
ronaldoussoren/cpython
The Python programming language
Python · C★ 1Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
Go
19Criticalhealth index
ronhuafeng/codexsdk-go
Archived: use github.com/ronhuafeng/llm-go/codexsdk; legacy v0.5.1 is immutable
Go · Python★ 1Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Go
19Criticalhealth index
sacloud/monitoring-suite-api-go
Go言語向け さくらのクラウド モニタリングスイート APIライブラリ
Go★ 1Aug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
NuGet
12Criticalhealth index
santedb/santeguard
SanteGuard Audit Repository
JavaScript★ 1Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
23At Riskhealth index
scheibelp/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
Python★ 1Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
npm
14Criticalhealth index
shinyoshiaki/werift-dtls
DTLS v1.2 server/client Implementation for TypeScript
TypeScript★ 1Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
Go
30At Riskhealth index
shizhMSFT/notation
No repository description published.
Go★ 1Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/go-web-exact
Webコンテンツ解析
Go★ 1Aug 30, 2026
MITAug 30, 2026 · metrics 2.10.0
Packagist · npm
33At Riskhealth index
silverstripe/documentation-lint
Abstraction around various linters for easy documentation linting for use in Silverstripe CMS supported modules
Shell · JavaScript★ 1↓ 2,654/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
19Criticalhealth index
sjmudd/gh-ost
GitHub's Online Schema Change for MySQL
Go★ 1Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
socketry/sus-fixtures-async
No repository description published.
Ruby★ 1Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
19Criticalhealth index
starnop/cri-tools
CLI and validation tools for Kubelet Container Runtime Interface (CRI) .
Go★ 1Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0