Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,670
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,391 recordsRanked by popularity · browse by tag · record statistics
npm
20At Riskhealth index
TyMick/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
19Criticalhealth index
TychoHenzen/dod-guard
No repository description published.
JavaScript · TypeScript · HTML★ 0↓ 79/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
crates.io
12Criticalhealth index
Vecno-Foundation/vecno-testnet
Vecno Testnet Node written in Rust.
Rust★ 0Oct 21, 2026
ISCOct 21, 2026 · metrics 2.10.0
npm
20At Riskhealth index
Virtuswap/v1-sdk
No repository description published.
TypeScript★ 0↓ 117/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
—
19Criticalhealth index
Viv1k/clui
Command Line User Interface (Console UI inspired by TurboVision)
Go★ 0Oct 4, 2026
MITOct 4, 2026 · metrics 2.10.0
Go
33At Riskhealth index
Voskan/arena-cache
GC‑free, high‑throughput in‑process cache for Go 1.24, powered by the new `arena` allocator
Go★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
20At Riskhealth index
VostroNet/lego
Let's Encrypt client and ACME library written in Go
Go★ 0Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
11Criticalhealth index
Webstrates/golem-herder
Control your golems, goddamnit.
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
16Criticalhealth index
Wicknight/RecBole
A unified, comprehensive and efficient recommendation library
Python · Jupyter Notebook★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
26At Riskhealth index
WojciechMazur/gazelle_cc
Public repository for the Gazelle C++ extension
Go · Scala★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
28At Riskhealth index
Go★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
16Criticalhealth index
X2OX/bencode
No repository description published.
Go★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
9Criticalhealth index
YesWeAreBot/adapter-manager
yes-core 核心插件:快速构建群聊响应,跨平台。
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
Go
10Criticalhealth index
YesWeAreBot/yes-core
A very tiny framework for any extendable event-driven system.
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
npm
22At Riskhealth index
You-saku/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
YouSysAdmin/totp
No repository description published.
Go★ 0Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
npm · PyPI
20At Riskhealth index
Zebartin/AzurLaneAutoScript
Azur Lane bot (CN/EN/JP/TW) 碧蓝航线脚本 | 无缝委托科研,全自动大世界
Python★ 0Sep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Maven
9Criticalhealth index
Zenfulcode/Commercify
No repository description published.
Java★ 0Sep 12, 2026
No licenseSep 12, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
ZeyuChen/PaddleNLP
Easy-to-use and Fast NLP library with awesome model zoo, supporting wide-range of NLP tasks from research to industrial applications.
Python★ 0Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm · PyPI
18Criticalhealth index
ZeyuChen/book
Deep Learning 101 with PaddlePaddle (深度学习框架入门教程)
HTML · Python★ 0Sep 9, 2026
No licenseSep 9, 2026 · metrics 2.10.0
—
20At Riskhealth index
ZeyuChen/models
Pre-trained and Reproduced Deep Learning Models (『飞桨』官方模型库,包含多种学术前沿和工业场景验证的深度学习模型)
Python · Shell★ 0Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
crates.io
11Criticalhealth index
a-happin/zabbrev
zsh abbreviation expansion plugin
Rust★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go · npm
16Criticalhealth index
a-thaler/cli
Simple set of commands to manage a Kyma installation
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
14Criticalhealth index
aThorp96/gemini
No repository description published.
Go★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
35Weakhealth index
aabadie/RIOT
RIOT - The friendly OS for IoT
C★ 0Aug 28, 2026
LGPL-2.1Aug 28, 2026 · metrics 2.10.0
npm
30At Riskhealth index
aabmass/opentelemetry-js
OpenTelemetry JavaScript API and SDK
TypeScript★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
—
17Criticalhealth index
aaronlehmann/logrus
Structured, pluggable logging for Go.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0