Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,029
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,351 recordsRanked by popularity · browse by tag · record statistics
—
9Criticalhealth index
rerost/playground
Playground for third party package
Go★ 3Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
19Criticalhealth index
rgst-io/stencil-golang
[MIGRATED] stencil template repository for Golang applications
Go Template · Go★ 3Sep 15, 2026
GPL-3.0Sep 15, 2026 · metrics 2.10.0
PyPI
8Criticalhealth index
rhasspy/rhasspy-asr-vosk-hermes
MQTT service for speech to text with Vosk using Hermes protocol
Python · Shell★ 3Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
ricoberger/parca-operator
Deploy and Operator Parca
Go · Makefile★ 3Sep 24, 2026
MITSep 24, 2026 · metrics 2.10.0
—
22At Riskhealth index
saghul/wasm3
🚀 The fastest WebAssembly interpreter
C★ 3Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
29At Riskhealth index
salute-developers/grail
No repository description published.
TypeScript★ 3↓ 7,475/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
Packagist
43Weakhealth index
silverstripe/cwp-core
CWP basic compatibility module
JavaScript · PHP★ 3↓ 2,890/moSep 21, 2026
BSD-3-ClauseSep 21, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
siy/aether
No repository description published.
Java★ 3Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
Go
5Criticalhealth index
slavkiy/lipa
Render html window tree
Go★ 3Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Packagist
8Criticalhealth index
smarty-php/smarty-phpunit
No repository description published.
PHP · Smarty★ 3↓ 8/moSep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
sp1-patches/bn
Pairing cryptography library in Rust
Rust★ 3Oct 17, 2026
Apache-2.0Oct 17, 2026 · metrics 2.10.0
npm
26At Riskhealth index
sparcs-kaist/react-grid-layout
react-grid-layout customization for usage in ZABO
JavaScript★ 3↓ 214/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
sphinx-doc/sphinxcontrib-applehelp
No repository description published.
Python★ 3↓ 16.1M/moOct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
PyPI
24At Riskhealth index
ssst0n3/opdb
an opcode level debugger for python
Python★ 3↓ 22/moOct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
starcoinorg/move
No repository description published.
Rust · Move★ 3Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
9Criticalhealth index
tana/turtly-converter
No repository description published.
Rust★ 3Oct 23, 2026
MPL-2.0Oct 23, 2026 · metrics 2.10.0
npm
26At Riskhealth index
telit/devicewise-angular
Angular 2+ Devicewise API Service
TypeScript · HTML★ 3Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
theseus-os/wasmtime
(Ported to Theseus) Standalone JIT-style runtime for WebAssembly, using Cranelift
Rust · WebAssembly★ 3Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
—
14Criticalhealth index
thibaultcha/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
C★ 3Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
crates.io
35Weakhealth index
tikv/rusoto
AWS SDK for Rust
Rust★ 3Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Maven
21At Riskhealth index
tjek/markhor
Utilities for Android projects (Java).
Java★ 3Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
crates.io
42Weakhealth index
tofay/rustls-cng-crypto
A Windows CNG crypto provider for rustls
Rust★ 3↓ 5,140/moSep 26, 2026
MITSep 26, 2026 · metrics 2.10.0
Go
38Weakhealth index
tomoya-namekawa/tf-file-organize
A Go CLI tool that parses and splits Terraform files by resource type for better organization.
Go★ 3Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
17Criticalhealth index
tyler-technologies-oss/forge-react
An adapter library for using Forge components in an React application.
TypeScript★ 3Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
NuGet
23At Riskhealth index
unoplatform/uno.extensions.logging
Set of loggers compatible with Microsoft.Extensions.Logging. Provides an OSLog logger, and a browser console WebAssembly logger
C#★ 3Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
npm
19Criticalhealth index
vLannaAi/noy-db
Zero-knowledge, offline-first, encrypted document store with pluggable backends and multi-user access control
TypeScript★ 3↓ 67.8K/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
PyPI
31At Riskhealth index
veg/BioExt
A few handy bioinformatics tools not already within BioPython
Python · C★ 3↓ 66/moSep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0