Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,488
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,395 recordsRanked by popularity · browse by tag · record statistics
—
24At Riskhealth index
nuttycom/zips
Zcash Improvement Proposals
TeX★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
14Criticalhealth index
nzoschke/zspotify
A Go wrapper for the Spotify Web API
Go★ 0Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
17Criticalhealth index
o53/websocket
Minimal and idiomatic WebSocket library for Go
Go★ 0Oct 19, 2026
ISCOct 19, 2026 · metrics 2.10.0
—
19Criticalhealth index
ocaml-dune/cmdliner
Declarative definition of command line interfaces for OCaml
OCaml★ 0Sep 14, 2026
ISCSep 14, 2026 · metrics 2.10.0
npm
14Criticalhealth index
octref/vscode-textmate
A library that helps tokenize text using Text Mate grammars.
JavaScript★ 0Oct 8, 2026
MITOct 8, 2026 · metrics 2.10.0
Go
18Criticalhealth index
oderwat/websocket
Minimal and idiomatic WebSocket library for Go
Go★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
oetiker/response-analyzer
A go app to analyse plain text responses stored in an excel files useing Claude
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
28At Riskhealth index
ogenev/go-ethereum
Official Go implementation of the Ethereum protocol
Go★ 0Sep 13, 2026
LGPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
18Criticalhealth index
ohdat/app
No repository description published.
Go★ 0Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
npm · PyPI
35Weakhealth index
ojarjur/jupyter_server
The backend—i.e. core services, APIs, and REST endpoints—to Jupyter web applications.
Python★ 0Sep 13, 2026
BSD-3-ClauseSep 13, 2026 · metrics 2.10.0
Go
20At Riskhealth index
okhowang/gocache
☔️ A complete Go cache library that brings you multiple ways of managing your caches
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
15Criticalhealth index
oliverisaac/s3www
Serve static files from any S3 compatible object storage services (Let's Encrypt ready)
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go · npm
6Criticalhealth index
omahs/oracle-node
No repository description published.
Go★ 0Oct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
omribahumi/async-profiler
Sampling CPU and HEAP profiler for Java featuring AsyncGetCallTrace + perf_events
C++ · Java★ 0Aug 23, 2026
Apache-2.0Aug 23, 2026 · metrics 2.10.0
Go
14Criticalhealth index
oneslash/goka
Goka is a compact yet powerful distributed stream processing library for Apache Kafka written in Go.
Go★ 0Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
26At Riskhealth index
onestep/gmail.js
Gmail JavaScript API
JavaScript★ 0Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
npm
15Criticalhealth index
openlattice/redux-reqseq
No repository description published.
JavaScript★ 0↓ 76/moSep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go · crates.io
12Criticalhealth index
openrequestprotocol/orp
An open, federated protocol for recipient-sovereign requests.
Rust · Go★ 0Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
opf/omniauth
OmniAuth is a flexible authentication system utilizing Rack middleware.
Ruby★ 0Oct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
Go
18Criticalhealth index
orn688/pat
Performance Analysis Toolbox for Go programs.
Go★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
oroinc/gridfs-config
OroGridFsConfigBundle provides configuration enhancements for Oro applications to enable usage of GridFS Documentation as filesystem.
PHP · Rich Text Format★ 0↓ 5,996/moSep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
Go
19Criticalhealth index
osac-project/fulfillment-cli
Cloud-in-a-box fulfillment CLI
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
—
19Criticalhealth index
oscarsaleta/PBala
PVM parallellization interface for single threaded scripts. This software allows to distribute executions in PVM enabled clusters using single program multiple data paradigm.
C★ 0Oct 19, 2026
GPL-3.0Oct 19, 2026 · metrics 2.10.0
—
15Criticalhealth index
ouotuo/go-knife
No repository description published.
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0