Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,640
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,407 recordsRanked by popularity · browse by tag · record statistics
—
15Criticalhealth index
getoutreach/null
reasonable handling of nullable values
Go★ 0Sep 19, 2026
BSD-2-ClauseSep 19, 2026 · metrics 2.10.0
npm
12Criticalhealth index
gfk-dev/dockership
dead simple docker deploy tool
Go · HTML★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
26At Riskhealth index
gfx/h2o
H2O - the optimized HTTP/1, HTTP/2, HTTP/3 server
C · Perl★ 0Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
ggs2ggs/openpilot
No repository description published.
Python · C++★ 0Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
ghislainp/satpy
Python package for earth-observing satellite data processing
Python★ 0Sep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
26At Riskhealth index
giacomoferretti/add-missing-headers
A Traefik plugin that adds missing HTTP headers to requests and responses without overriding existing headers.
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
20At Riskhealth index
giautm/terraform-ls
Terraform Language Server
Go★ 0Sep 9, 2026
MPL-2.0Sep 9, 2026 · metrics 2.10.0
Maven · npm · Packagist +2
20At Riskhealth index
gitql/vitess
vitess fork meant to be used internally by gitql
Go · PHP★ 0Sep 10, 2026
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
Go
20At Riskhealth index
giuliano-macedo/diff
A library for diffing golang structures
Go★ 0Oct 18, 2026
MPL-2.0Oct 18, 2026 · metrics 2.10.0
Go
16Criticalhealth index
gkdada/gozt
Go version of zero-touch backup (see ztbackup for C++ version of the same tool). Uses sync method to create/update backup of a specified folder on to local, samba or sftp folders.
Go★ 0Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
—
15Criticalhealth index
gkirok/tsdb-nuclio
No repository description published.
Go★ 0Sep 26, 2026
Apache-2.0Sep 26, 2026 · metrics 2.10.0
npm
26At Riskhealth index
globalworldwide/grpc-resolvers
Custom resolvers for @grpc/grpc-js
TypeScript★ 0↓ 4,274/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
19Criticalhealth index
glocurrency/commons
Common helpers for Golang projects used @ GloCurrency.
Go★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
glycerine/go-git
A highly extensible Git implementation in pure Go.
Go★ 0Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
15Criticalhealth index
gmlewis/emitter-io-go
Go/Golang client for emitter
Go★ 0Sep 19, 2026
EPL-1.0Sep 19, 2026 · metrics 2.10.0
—
20At Riskhealth index
gnarled-cipher/serving
Kubernetes-based, scale-to-zero, request-driven compute
Go★ 0Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
gnosis/gp-transaction-retry
No repository description published.
Rust★ 0Sep 25, 2026
Custom licenseSep 25, 2026 · metrics 2.10.0
Go
19Criticalhealth index
go-go-golems/tiny-idp
No repository description published.
Go★ 0Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
22At Riskhealth index
goarchiver/gosoline
Gosoline is our framework which fuels all of our Golang applications
Go★ 0Oct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
Go
13Criticalhealth index
gochigo/plush
The powerful template system that Go needs
Go★ 0Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
19Criticalhealth index
gofenix/go-mitmproxy
mitmproxy implemented with golang. 用 Golang 实现的中间人攻击(Man-in-the-middle),解析、监测、篡改 HTTP/HTTPS 流量。
Go · TypeScript★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
—
13Criticalhealth index
goller/telegraf
The plugin-driven server agent for collecting & reporting metrics.
Go★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go · npm
19Criticalhealth index
gotrs-io/gotrs-ce
Modern security focussed ticketing system inspired by OTRS
Go★ 0Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
15Criticalhealth index
govau/go-uaa
UAA API Client Library
Go★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
14Criticalhealth index
govuk-pay/carbon-relay-ng
Fast carbon relay+aggregator with admin interfaces for making changes online - production ready. Fork managed by the GOV.UK Pay team.
Go · JavaScript★ 0Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
grabr/SynapseRuby
No repository description published.
Ruby★ 0Oct 4, 2026
No licenseOct 4, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
gracekarina/swagger-parser
Swagger Spec to Java POJOs
Java★ 0Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
Go
9Criticalhealth index
grafana-cold-storage/macaron
Package macaron is a high productive and modular web framework in Go.
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0