Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,491
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,286 recordsRanked by popularity · browse by tag · record statistics
10Criticalhealth index
Go★ 0Aug 22, 2026
No licenseAug 22, 2026 · metrics 2.10.0
npm
20At Riskhealth index
TyMick/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
16Criticalhealth index
TychoHenzen/dod-guard
No repository description published.
JavaScript · HTML · TypeScript★ 0↓ 9,273/moAug 22, 2026
No licenseAug 22, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
Vecno-Foundation/vecno-testnet
Vecno Testnet Node written in Rust.
Rust★ 0Aug 29, 2026
ISCAug 29, 2026 · metrics 2.10.0
Go
33At Riskhealth index
Voskan/arena-cache
GC‑free, high‑throughput in‑process cache for Go 1.24, powered by the new `arena` allocator
Go★ 0Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
20At Riskhealth index
VostroNet/lego
Let's Encrypt client and ACME library written in Go
Go★ 0Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
Wicknight/RecBole
A unified, comprehensive and efficient recommendation library
Python · Jupyter Notebook★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
npm
22At Riskhealth index
You-saku/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm · PyPI
20At Riskhealth index
Zebartin/AzurLaneAutoScript
Azur Lane bot (CN/EN/JP/TW) 碧蓝航线脚本 | 无缝委托科研,全自动大世界
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
Maven
10Criticalhealth index
Zenfulcode/Commercify
No repository description published.
Java★ 0Jul 20, 2026
No licenseJul 20, 2026 · metrics 2.10.0
crates.io
11Criticalhealth index
a-happin/zabbrev
zsh abbreviation expansion plugin
Rust★ 0Aug 15, 2026
MITAug 15, 2026 · metrics 2.10.0
35Weakhealth index
aabadie/RIOT
RIOT - The friendly OS for IoT
C★ 0Aug 28, 2026
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
npm
31At Riskhealth index
aabmass/opentelemetry-js
OpenTelemetry JavaScript API and SDK
TypeScript★ 0↓ 32K/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
npm
14Criticalhealth index
absolutejs/vulnerabilities-osv
Archived: moved to the vulnerabilities-adapters monorepo (osv/ workspace)
TypeScript★ 0↓ 2,131/moAug 5, 2026
Custom licenseAug 5, 2026 · metrics 2.10.0
npm
15Criticalhealth index
absolutejs/vulnerabilities-postgres
Archived: moved to the vulnerabilities-adapters monorepo (postgres/ workspace)
TypeScript★ 0↓ 3,498/moAug 5, 2026
Custom licenseAug 5, 2026 · metrics 2.10.0
PyPI
25At Riskhealth index
adamjstewart/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
adamsinnett/kegbot
Kegbot Server, the internet beer kegerator monitoring system.
Python★ 0Aug 23, 2026
GPL-2.0Aug 23, 2026 · metrics 2.10.0
Go
32At Riskhealth index
adamwg/crossplane
The Cloud Native Control Plane
Go★ 0Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
Go
20At Riskhealth index
adapap/depth
Visualize Go Dependency Trees
Go★ 0Aug 11, 2026
MITAug 11, 2026 · metrics 2.10.0
Go
22At Riskhealth index
adasauce/assh
:computer: make your ssh client smarter
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
PyPI
32At Riskhealth index
adrienbernede/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
20At Riskhealth index
agazso/swarm
Swarm: Censorship resistant storage and communication infrastructure for a truly sovereign digital society
Go★ 0Aug 10, 2026
LGPL-3.0Aug 10, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
ahmede41/picocli
Picocli is a modern framework for building powerful, user-friendly, GraalVM-enabled command line apps with ease. It supports colors, autocompletion, subcommands, and more. In 1 source file so apps can include as source & avoid adding a dependency. Written in Java, usable from Groovy, Kotlin, Scala, etc.
Java★ 0Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
aidanhs/criner
A tool to mine crates.io and produce static websites
Rust★ 0Aug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Go
16Criticalhealth index
aiscrm/mapstruct
No repository description published.
Go★ 0Jul 27, 2026
No licenseJul 27, 2026 · metrics 2.10.0
31At Riskhealth index
alarshi/aspect
A parallel, extensible finite element code to simulate convection in both 2D and 3D models.
C++★ 0Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
alerque/git-branchless
High-velocity, monorepo-scale workflow for Git
Rust★ 0Aug 19, 2026
Apache-2.0Aug 19, 2026 · metrics 2.10.0