Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,810
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,416 recordsRanked by popularity · browse by tag · record statistics
RubyGems
25At Riskhealth index
envygeeks/extras
Provides patches to stdlib that provide extra/fix methods.
Ruby★ 1Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io
28At Riskhealth index
epage/liquid-rust
Liquid templating for Rust
Rust★ 1Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Go
18Criticalhealth index
epiccoolguy/go-bitfield
No repository description published.
Go★ 1Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
31At Riskhealth index
expipiplus1/slang
Making it easier to work with shaders
C++★ 1Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
expressots/expressots-studio
[Moved to expressots/expressots monorepo] ExpressoTS Studio - Developer Experience Platform 🐎
TypeScript★ 1Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
crates.io · Go
21At Riskhealth index
faddat/wasmvm
Go bindings to the running cosmwasm contracts with wasmer
Go · Rust★ 1Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
16Criticalhealth index
fannarsh/prefect
Manages node's built-in cluster module
JavaScript★ 1↓ 2,231/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
fkluknav/dumb-init
A minimal init system for Linux containers
Python · C★ 1Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
—
3Criticalhealth index
flyingmutant/cmus
Small, fast and powerful console music player for Unix-like operating systems.
C★ 1Sep 13, 2026
GPL-2.0Sep 13, 2026 · metrics 2.10.0
—
14Criticalhealth index
franciscolourenco/html5-boilerplate
starting html/css template. so much goodness baked in by default
PHP · JavaScript★ 1Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
g11tech/mergemock
Merge Mock - testing tool for the Ethereum Merge
Go★ 1Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Packagist
29At Riskhealth index
gabrielesbaiz/whatsapp-toolkit
A helper package to handle WhatsApp messages using api.whatsapp.com
PHP★ 1↓ 3,017/moSep 27, 2026
MITSep 27, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
garyvdm/dbus-ezy
Fork of dbus-next in the early phase of develoment.
Python★ 1Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
geemus/netrc
Reads and writes netrc files.
Ruby★ 1Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
geldata/graphql-parser
A graphql-parser fork that has customizations needed for EdgeDB
Rust★ 1Sep 25, 2026
Apache-2.0Sep 25, 2026 · metrics 2.10.0
—
16Criticalhealth index
gertingold/caps
The Casimir Effect in the plane-sphere geometry.
C++ · C★ 1Oct 19, 2026
GPL-2.0Oct 19, 2026 · metrics 2.10.0
—
25At Riskhealth index
getgauge/template-java
No repository description published.
Java · Ruby · Dockerfile★ 1Sep 18, 2026
CC0-1.0Sep 18, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
ghiggi/satpy
Python package for earth-observing satellite data processing
Python★ 1Sep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
—
23At Riskhealth index
ghostery/github-release
Commandline app to create and edit releases on Github (and upload artifacts)
Go★ 1Oct 9, 2026
MITOct 9, 2026 · metrics 2.10.0
Go
19Criticalhealth index
giantswarm/klaus-operator
Kubernetes operator for dynamic Klaus instance management
Go★ 1Oct 22, 2026
Apache-2.0Oct 22, 2026 · metrics 2.10.0
npm · Packagist
22At Riskhealth index
gkatsev/video.js
Universal video embed.
JavaScript★ 1Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
Go
17Criticalhealth index
glycerine/shiny
Multiplatform Go UI and Window Rendering library
Go★ 1Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
gnosis/gp-gas-estimation
No repository description published.
Rust★ 1Sep 25, 2026
Custom licenseSep 25, 2026 · metrics 2.10.0
—
13Criticalhealth index
gravitational/libbpf
Automated upstream mirror for libbpf stand-alone build
C★ 1Oct 3, 2026
Custom licenseOct 3, 2026 · metrics 2.10.0
Go
12Criticalhealth index
guardian/nest-secrets
Easily get secrets from parameter store.
Go · Shell★ 1Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
—
22At Riskhealth index
gzachos/compilers-course-uoi
CiScal Compiler developed for the Compilers course @cse.uoi.gr
Python★ 1Oct 20, 2026
GPL-2.0Oct 20, 2026 · metrics 2.10.0
Hex
26At Riskhealth index
h3poteto/opentelemetry_phoenixchannel
Telemetry handler that creates Opentelemetry spans for Phoenix.Channels events
Elixir★ 1↓ 3,046/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
22At Riskhealth index
hansl/simple-cbor
Encode and decode CBOR documents, with compatibility and control for all subtypes
TypeScript★ 1↓ 119.4K/moOct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0