Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,175
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,362 recordsRanked by popularity · browse by tag · record statistics
Go
20At Riskhealth index
r0ld3x/redis-clone-go
A lightweight, high-performance Redis-inspired clone written in Go, following the "Build Your Own Redis" CodeCrafters challenge. Perfect for learning database internals, caching mechanisms, and distributed systems concepts.
Go★ 2Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
2Criticalhealth index
satt-hri/LMS
No repository description published.
TypeScript★ 2Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
npm
3Criticalhealth index
satt-hri/chat-app
No repository description published.
JavaScript★ 2Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
17Criticalhealth index
shilkin/centrifugo
Real-time messaging (Websockets or SockJS) server in Go
Go · CMake★ 2Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
7Criticalhealth index
soedirgo/sat-solver
CDCL SAT solver for instances in DIMACS CNF format
Rust · Shell★ 2Sep 18, 2026
UnlicenseSep 18, 2026 · metrics 2.10.0
Go
22At Riskhealth index
themedef/go-hermes
No repository description published.
Go★ 2Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
22At Riskhealth index
unowned-ai/recall
A self-hostable datastore for memories to share with your AI models.
Go★ 2Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
30At Riskhealth index
wooorm/is-hexadecimal
Check if a character is hexadecimal
JavaScript★ 2↓ 178M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go · PyPI
14Criticalhealth index
wtsi-ssg/wr
experimental reimplementation of wr using TDD
Go★ 2Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
PyPI
3Criticalhealth index
xrxbsx/goldmine
Goldmine, a new bot for Discord that keeps things nice and snug. Featuring VOICE (MUSIC), NATURAL LANGUAGE, IMAGES, CUSTOM WIDGETS, RANKS, and more!
Python★ 2Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
17Criticalhealth index
0x0FACED/sval
sval is a simple struct validator that can be fully configured through config file
Go★ 1Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
RubyGems
43Weakhealth index
18F/identity-validations
A gem to provide validators that can be used across multiple repositories.
Ruby★ 1Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
23At Riskhealth index
AlexanderGrooff/jinja-go
Jinja library that acts just like the Python Jinja library but written in Golang
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
24At Riskhealth index
AlexanderMac/gosu
A package for self updating Go applications
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
Axione/horus
Horus is a distributed tool to collect snmp and icmp metrics from various network equipments and send the results to kafka, NATS.io, prometheus, and/or influxDB
Go★ 1Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
BurntSushi/semver
Semantic version parsing and comparison.
Rust★ 1Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
ClickHouse/annoy
Approximate Nearest Neighbors in C++/Python optimized for memory usage and loading/saving to disk
C++ · Python · Lua★ 1Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
15Criticalhealth index
DoOR-Team/gophersat
gophersat, a SAT solver in Go
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go · Maven · npm
17Criticalhealth index
EasyDynamics/OSCAL
Open Security Controls Assessment Language (OSCAL)
XSLT★ 1Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
16Criticalhealth index
HeliumProject/rapidjson
Mirror of http://code.google.com/p/rapidjson
C++ · C★ 1Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
20At Riskhealth index
Koeng101/rhea
Golang Rhea parser
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
29At Riskhealth index
LTLA/aarand
Aaron's random distributions for C++
C++★ 1Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
Moonsong-Labs/compilers
Utilities for working with native solc and compiling projects.
Rust★ 1Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
20At Riskhealth index
Nanyan/heco-chain
HECO-Chain client based on the go-ethereum fork
Go★ 1Sep 19, 2026
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
17Criticalhealth index
OKNoah/wormhole
Secure tunnel
Go★ 1Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
16Criticalhealth index
Ph0m1/Porta
No repository description published.
Go★ 1Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
16Criticalhealth index
Prendo93/m3u8-1
Parser and generator of M3U8-playlists for Apple HLS. Library for Go language. :cinema:
Go★ 1Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
Qintsg/dsh-safe-delete
Safe delete plugin for DeepSeek Harness (DSH): move files to trash / staging area instead of permanent removal, with restore and purge support.
TypeScript★ 1↓ 614/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0