Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
98,080
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,449 recordsRanked by popularity · browse by tag · record statistics
npm · crates.io · Maven
19Criticalhealth index
bloxbean/yano
A Cardano data node written in Java, powered by Yaci
Java★ 3↓ 1,808/moOct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
npm
24At Riskhealth index
cerebris/klassy.js
A class system featuring mixins, constructors, and superclass access.
JavaScript★ 3↓ 34.8K/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
30At Riskhealth index
cityssm/get-canadian-bank-name
A simple library to translate Canadian bank institution and transit numbers into the corresponding bank names.
TypeScript · JavaScript★ 3↓ 638/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
11Criticalhealth index
cloudfoundry-attic/mkman
Tool to create bosh manifests
Go★ 3Sep 26, 2026
Apache-2.0Sep 26, 2026 · metrics 2.10.0
PyPI
35Weakhealth index
cmastalli/crocoddyl
Crocoddyl is an optimal control library for robot control under contact sequence. Its solver is based on various efficient Differential Dynamic Programming (DDP)-like algorithms
C++★ 3Sep 11, 2026
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
Go
19Criticalhealth index
cmtonkinson/governator
Structured, architecture-first orchestration for autonomous, multi-agent development.
Go★ 3Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
codehaus-plexus/plexus-cipher
No repository description published.
Java★ 3Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
npm
20At Riskhealth index
coderofstuff/hw-app-kaspa
Ledger JS library for kaspa
TypeScript★ 3Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
15Criticalhealth index
colt3k/utils
Numerous utility libraries and tools
Go★ 3Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
crates.io
37Weakhealth index
cube-js/sqlparser-rs
Extensible SQL Lexer and Parser for Rust
Rust★ 3Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
crates.io
11Criticalhealth index
datafuse-extras/msql-srv
Bindings for writing a server that can act as MySQL/MariaDB
Rust★ 3Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
19Criticalhealth index
deckhouse/csi-nfs
No repository description published.
Go★ 3Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
—
5Criticalhealth index
dials/dxtbx
Diffraction Experiment Toolbox
Python · C++★ 3Oct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
Go
29At Riskhealth index
dicedb/dicedb-go-defunct
GO SDK for DiceDB
Go★ 3Sep 13, 2026
BSD-2-ClauseSep 13, 2026 · metrics 2.10.0
npm
15Criticalhealth index
dougmoscrop/fold-case
A letter case folder with full Unicode support, i.e. based on the official Unicode case folding mappings.
JavaScript★ 3Sep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
dpep/py_classproperties
Class properties made easy-er
Python★ 3Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
20At Riskhealth index
dpwgc/easierweb
More user-friendly, high performance Go Web framework. ~ 更简单易用的高性能 Go Web 框架
Go★ 3Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
dtolnay/serde-json
Strongly typed JSON library for Rust
Rust★ 3Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
npm
16Criticalhealth index
edsdk/n1ed-react
Official N1ED React component
TypeScript★ 3↓ 114M/moSep 16, 2026
LGPL-3.0Sep 16, 2026 · metrics 2.10.0
NuGet
35Weakhealth index
elmahio/elmah.io.log4net
log4net appender for elmah.io
C#★ 3Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
Go
11Criticalhealth index
erda-project/erda-proto-go
Generated code for Erda protobuf data modals and protocols.
Shell · Makefile★ 3Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
35Weakhealth index
es-shims/Array.prototype.findLastIndex
An ESnext spec-compliant `Array.prototype.findLastIndex` shim/polyfill/replacement that works as far down as ES3.
JavaScript★ 3↓ 192M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
19Criticalhealth index
escoffier-labs/agent-notify
Inside escoffier-labs/brigade (stations/notify). Privacy-first push notifications for AI coding agents to Discord, Telegram, and Signal.
Go★ 3Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
ethanolivertroy/wilma
Wilma - AWS Bedrock Security Configuration Checker
Python★ 3↓ 43/moSep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
exoplanet-dev/case-studies
exoplanet | case studies
Mixed★ 3Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
25At Riskhealth index
feather-wallet/monero
Monero: the secure, private, untraceable cryptocurrency
C++ · C★ 3Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0