Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,198
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,338 recordsRanked by popularity · browse by tag · record statistics
Go
10Criticalhealth index
hhrutter/lzw
An extended version of compress/lzw.
Go★ 9Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
japaric/as-slice
No repository description published.
Rust★ 9↓ 5.3M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
19Criticalhealth index
kairos-io/immucore
:hedgehog: The Kairos immutability management interface
Go★ 9Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Packagist
25At Riskhealth index
kartik-v/yii2-bootstrap4-dropdown
Enhanced Bootstrap 4 dropdown widget for Yii2 framework with nested submenu support.
PHP · JavaScript · CSS★ 9↓ 29.9K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Packagist
11Criticalhealth index
minkphp/MinkSeleniumDriver
[DEPRECATED] Selenium driver for Mink framework
PHP★ 9↓ 259/moSep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Go
10Criticalhealth index
tinkernels/doh-proxy
A DNS-protocol proxy for DNS-over-HTTPS providers, such as Google and Cloudflare
Go★ 9Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
tk0miya/docutils-stubs
No repository description published.
Python★ 9↓ 149K/moSep 17, 2026
UnlicenseSep 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
unit-io/unitdb-go
Lightweight and high performance publish-subscribe messaging system - Go client library.
Go★ 9Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
29At Riskhealth index
wooorm/longest-streak
Count the longest repeating streak of a substring
JavaScript★ 9↓ 184M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
21At Riskhealth index
JuliaPOMDP/POMDPModelTools.jl
Useful extensions of the POMDPs.jl interface
Julia★ 8Sep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
23At Riskhealth index
Kangz/glslpp-rs
A GLSL preprocessor and lexer in Rust.
Rust★ 8↓ 507.9K/moSep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
Packagist
10Criticalhealth index
Kanti/LJSON
JSON extended with pure functions. in PHP
PHP★ 8↓ 0/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
NuGet
19Criticalhealth index
OctopusDeploy/OctopusCLI
| Public | Command line tool for Octopus Deploy
C#★ 8Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
12Criticalhealth index
equalsraf/neovim
vim's rebirth for the 21st century
Vim Script · C★ 8Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
est31/maybe-uninit
MaybeUninit for friends of backwards compatibility
Rust★ 8↓ 2M/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
14Criticalhealth index
estroz/rerun-actions
A GitHub App that re-runs Action Workflows via PR comment commands.
Go★ 8Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
go-toolsmith/astequal
Package astequal provides AST (deep) equallity check operations.
Go★ 8Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
26At Riskhealth index
mathiasbynens/unicode-match-property-value-ecmascript
Match a Unicode property or property alias to its canonical property name per the algorithm used for RegExp Unicode property escapes in ECMAScript.
JavaScript★ 8↓ 169M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
32At Riskhealth index
mathiasbynens/unicode-property-aliases-ecmascript
Unicode property alias mappings in JavaScript format for property names that are supported in ECMAScript RegExp property escapes.
JavaScript★ 8↓ 163M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
10Criticalhealth index
ovotech/iam-service-account-controller
Kubernetes controller that automatically manages AWS IAM roles for ServiceAccounts
Go★ 8Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
24At Riskhealth index
FISCO-BCOS/evmc
EVMC – Ethereum Client-VM Connector API
C · CMake★ 7Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
14Criticalhealth index
HuHoBot/BDSAdapter
HuHoBot for BDS, enabling the official QQ bot to connect to your server.
JavaScript★ 7Sep 20, 2026
GPL-3.0Sep 20, 2026 · metrics 2.10.0
PyPI · Go
19Criticalhealth index
OperationsPAI/AegisLab
No repository description published.
Go · Python★ 7↓ 492/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
Web3Auth/single-factor-auth
No repository description published.
TypeScript★ 7↓ 5,431/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
Go
10Criticalhealth index
alexandrestein/gotinydb
A simple pure Golang database
Go★ 7Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
28At Riskhealth index
artela-network/cometbft-db
Database wrapper for CometBFT
Go★ 7Sep 21, 2026
Apache-2.0Sep 21, 2026 · metrics 2.10.0
crates.io
13Criticalhealth index
bincode-org/unty
A crate that allows you to mostly-safely cast one type into another type.
Rust★ 7↓ 4.7M/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
RubyGems
12Criticalhealth index
cucumber/gherkin-ruby
[READ-ONLY] Gherkin for Ruby - subtree of monorepo https://github.com/cucumber/cucumber -- moved to https://github.com/cucumber/gherkin
Ruby★ 7Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
23At Riskhealth index
evstack/gm
A repository of the completed gm-world tutorial.
Go★ 7Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0