Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,038
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,446 recordsRanked by popularity · browse by tag · record statistics
npm
23At Riskhealth index
jlelong/vscode-extend-language
Generate a new language configuration file for VS Code by extending an existing one
JavaScript★ 2↓ 1,109/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
32At Riskhealth index
juspay/newman
Newman is a command-line collection runner for Postman
JavaScript★ 2Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
k11k-labs/better-blocks-react-renderer
Merged into the strapi-plugin-better-blocks monorepo — development continues at https://github.com/k11k-labs/strapi-plugin-better-blocks (packages/better-blocks-react-renderer). This repository is archived; its full history was preserved in the merge.
TypeScript★ 2Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
kapilt/cloud-custodian
Policy rules engine for aws management, policies in yaml for query, filter, and take actions on resources
Python★ 2Oct 17, 2026
Apache-2.0Oct 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
kaptinlin/jsonpatch
Go library for JSON Patch (RFC 6902) with extended operations and JSON Predicate support
Go★ 2Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
19Criticalhealth index
kenttonino/BaseShift
A number system converter.
C★ 2Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
28At Riskhealth index
koh-yoshimoto/mysql-mcp-server
A Model Context Protocol (MCP) server that enables AI assistants to interact with MySQL databases. Query execution, schema inspection, and seamless integration with Claude, Cursor, and VSCode.
Go · JavaScript★ 2Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
12Criticalhealth index
kubemq-io/gosoline
Gosoline is our framework which fuels all of our Golang applications
Go★ 2Oct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
npm
19Criticalhealth index
logto-io/toolkit
🧰 Logto standard toolkit.
TypeScript · SCSS★ 2↓ 11.4K/moOct 6, 2026
MITOct 6, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
lyndsey-ferguson/xctest_list
Collects a list of all the tests in a Xcode test bundle or test runner
Ruby★ 2Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
6Criticalhealth index
marten-seemann/tcp
Package tcp implements TCP-level socket options
Go★ 2Sep 23, 2026
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
mastodon/webpush
webpush, Encryption Utilities for Web Push protocol
Ruby★ 2Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
14Criticalhealth index
mattermost/eslint-plugin-mattermost
Archived ESLint plugin for Mattermost code. Moved to the monorepo: https://github.com/mattermost/mattermost
JavaScript★ 2Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
22At Riskhealth index
mercury-hpc/mchecksum
Generic checksum library.
C · CMake★ 2Sep 25, 2026
BSD-3-ClauseSep 25, 2026 · metrics 2.10.0
Go
29At Riskhealth index
messi-yang/ggol
Inspired by Conway's Game of Life, built for more possibilities!
Go★ 2Oct 16, 2026
MITOct 16, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
mlibrary/handle_rest
ruby interface to handle REST api
Ruby · Shell★ 2Sep 22, 2026
Custom licenseSep 22, 2026 · metrics 2.10.0
npm
26At Riskhealth index
molbiodiv/biojs-io-biom
Parses biom files
JavaScript★ 2↓ 90/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
—
13Criticalhealth index
mqom/mqom-v2
MQOM v2 Digital Signature Scheme
C★ 2Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
3Criticalhealth index
mrg1995/MyWorkExperience
个人工作学习中的点滴记录
Python★ 2Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
mrya-lang/Mrya
Mrya language
Python★ 2Oct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
20At Riskhealth index
mtibben/percent
Package percent escapes strings using percent-encoding
Go★ 2Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
20At Riskhealth index
mudler/cOS-toolkit
:snowflake: cOS is a toolkit to build, ship and maintain cloud-init driven Linux derivatives based on container images
Shell · Go · HCL★ 2Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
25At Riskhealth index
mumoshu/actions-runner-controller
Kubernetes controller for GitHub Actions self-hosted runnners
Go★ 2Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
mur-run/mur-core
mur-core – continuous learning system for AI assistants
Go★ 2Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Go
19Criticalhealth index
musher-dev/mush
Portable agent bundles for local coding agents.
Go★ 2Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
namada-net/ethbridge-rs
Namada Ethereum bridge Rust compatible types
Rust★ 2Oct 12, 2026
MITOct 12, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
nanovms/qemu
Official QEMU mirror. Please see http://wiki.qemu.org/Contribute/SubmitAPatch for how to submit changes to QEMU. Pull Requests are ignored. Please only use release tarballs from the QEMU website.
C★ 2Sep 22, 2026
Custom licenseSep 22, 2026 · metrics 2.10.0
npm · crates.io
19Criticalhealth index
nitra/7n-rules
nitra cursor rules
Rust · JavaScript★ 2↓ 3,812/moOct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
npm
20At Riskhealth index
oconnor663/blake3-js
BLAKE3 hashing for JavaScript: native Node bindings (where available) and WebAssembly
TypeScript★ 2Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0