Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,488
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,256 recordsRanked by popularity · browse by tag · record statistics
Go
16Criticalhealth index
ferranbt/go-eth2-client
No repository description published.
Go★ 0Jul 31, 2026
Apache-2.0Jul 31, 2026 · metrics 2.10.0
Go · npm
28At Riskhealth index
ffjlabo/pipecd
Continuous Delivery for Declarative Kubernetes, Serverless and Infrastructure Applications
Go · JavaScript · TypeScript★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
fgouteroux/metrictank
metrics2.0 based, multi-tenant timeseries store for Graphite and friends.
Go★ 0Aug 7, 2026
AGPL-3.0Aug 7, 2026 · metrics 2.10.0
crates.io
14Criticalhealth index
filecoin-project/wasmtime
Standalone JIT-style runtime for WebAssembly, using Cranelift
Rust · WebAssembly★ 0Aug 5, 2026
Apache-2.0Aug 5, 2026 · metrics 2.10.0
npm
12Criticalhealth index
filipw/omnisharp-vscode
Official C# support for Visual Studio Code (powered by OmniSharp)
TypeScript★ 0↓ 35/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Go
18Criticalhealth index
fintreal/eas-sdk-go
No repository description published.
Go★ 0Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
16Criticalhealth index
franciscocpg/retool
Vendoring for executables written in Go
Go★ 0Sep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Maven
13Criticalhealth index
frantuma/swagger-parser
Swagger Spec to Java POJOs
Java★ 0Aug 29, 2026
Custom licenseAug 29, 2026 · metrics 2.10.0
14Criticalhealth index
frezbo/advanced-ssh-config
:computer: make your ssh client smarter
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Go
18Criticalhealth index
fufuok/gjson
Get JSON values quickly - JSON parser for Go
Go★ 0Aug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
Go
22At Riskhealth index
fujiwara/ssmwrap
Exec command with environment variables loaded from AWS SSM.
Go★ 0Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Go
31At Riskhealth index
gab-satchi/eventing
Open source specification and implementation of Knative event binding and delivery
Go★ 0Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
18Criticalhealth index
gebner/lean
Lean Theorem Prover
C++ · Lean★ 0Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
npm
22At Riskhealth index
george-hm/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
gerritholl/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
Go
19Criticalhealth index
getarcaneapp/updater
https://github.com/getarcaneapp/ki
Go★ 0Sep 5, 2026
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
26At Riskhealth index
gfx/h2o
H2O - the optimized HTTP/1, HTTP/2, HTTP/3 server
C · Perl★ 0Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
ggs2ggs/openpilot
No repository description published.
Python · C++★ 0Aug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
ghislainp/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
13Criticalhealth index
goller/telegraf
The plugin-driven server agent for collecting & reporting metrics.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
Packagist
38Weakhealth index
gosuperscript/monetary-interval
No repository description published.
PHP★ 0↓ 15.9K/moAug 5, 2026
No licenseAug 5, 2026 · metrics 2.10.0
Go · npm
19Criticalhealth index
gotrs-io/gotrs-ce
Modern security focussed ticketing system inspired by OTRS
Go★ 0Aug 23, 2026
Apache-2.0Aug 23, 2026 · metrics 2.10.0
Go
22At Riskhealth index
greenpau/origin_caddyserver_caddy
Fast, multi-platform web server with automatic HTTPS
Go★ 0Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.10.0
Go
31At Riskhealth index
gsdenys/cerr
Standardization of system errors
Go★ 0Aug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
19Criticalhealth index
gter1216/libfyaml
Fully feature complete YAML parser and emitter, supporting the latest YAML spec and passing the full YAML testsuite.
C★ 0Aug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
Go
12Criticalhealth index
gumpyoung/hc
HomeControl is an implementation of the HomeKit Accessory Protocol (HAP) in Go.
Go★ 0Aug 22, 2026
Apache-2.0Aug 22, 2026 · metrics 2.10.0
13Criticalhealth index
guyongqiangx/git-e83c5163
基于git代码第一版的详细注释,学习git原理最好的材料
C★ 0Aug 23, 2026
No licenseAug 23, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
gvozdikb/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0