Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,659
Monthly downloads under inspection
650B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,389 recordsRanked by popularity · browse by tag · record statistics
Maven
17Criticalhealth index
ahmede41/picocli
Picocli is a modern framework for building powerful, user-friendly, GraalVM-enabled command line apps with ease. It supports colors, autocompletion, subcommands, and more. In 1 source file so apps can include as source & avoid adding a dependency. Written in Java, usable from Groovy, Kotlin, Scala, etc.
Java★ 0Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
21At Riskhealth index
ahur-system/sysmedic
No repository description published.
Go · Shell★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
aidanhs/criner
A tool to mine crates.io and produce static websites
Rust★ 0Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
aigerege/platform-core
No repository description published.
Go★ 0Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
19Criticalhealth index
ainar-g/dns
DNS library in Go
Go★ 0Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
Go
15Criticalhealth index
aiscrm/mapstruct
No repository description published.
Go★ 0Sep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
—
16Criticalhealth index
aj0strow/netlifyctl
No repository description published.
Go★ 0Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
24At Riskhealth index
akomic/kubectl-aws-nodes
A kubectl plugin that extends `kubectl get nodes` with AWS EC2 instance information.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
—
29At Riskhealth index
alarshi/aspect
A parallel, extensible finite element code to simulate convection in both 2D and 3D models.
C++★ 0Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
Packagist
21At Riskhealth index
alcaeus/orm
Doctrine Object Relational Mapper (ORM)
PHP★ 0Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
alejoamiras/aztec-accelerator
Moved to Presto. Legacy releases remain available; migration is manual. https://presto.build
Rust · TypeScript · HTML★ 0↓ 207/moOct 22, 2026
AGPL-3.0Oct 22, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
alerque/git-branchless
High-velocity, monorepo-scale workflow for Git
Rust★ 0Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Packagist
24At Riskhealth index
alexander-schranz/orm
Doctrine Object Relational Mapper (ORM)
PHP★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
alexcrichton/bytes
Utilities for working with bytes
Rust★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
16Criticalhealth index
alexflint/diff
A library for diffing golang structures
Go★ 0Oct 18, 2026
MPL-2.0Oct 18, 2026 · metrics 2.10.0
npm
16Criticalhealth index
alexgorbatchev/filtrex
A simple, safe, JavaScript Filter Expression compiler for end-users
JavaScript★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
—
20At Riskhealth index
algoadv/etcd
A distributed consistent key-value store for shared configuration and service discovery
Go★ 0Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
23At Riskhealth index
algolia/events
Node's event emitter for all engines.
JavaScript★ 0↓ 8M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
—
13Criticalhealth index
allenlz/twemproxy
A fast, light-weight proxy for memcached and redis
C★ 0Oct 21, 2026
Apache-2.0Oct 21, 2026 · metrics 2.10.0
npm
19Criticalhealth index
almadar-io/almadar-evaluator
S-expression evaluator for Almadar
TypeScript★ 0↓ 3,902/moOct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
alphagov/siteimprove_api_client
Autogenerated ruby client for SiteImprove API
Ruby★ 0Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Go
18Criticalhealth index
altshiftab/gcp_utils
No repository description published.
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
always-open/laravel-process-stamps
Logs which process created or modified a record
PHP★ 0↓ 31.6K/moOct 1, 2026
MITOct 1, 2026 · metrics 2.10.0
Packagist
37Weakhealth index
always-open/laravel-request-logger
Log HTTP web requests made from your application
PHP · Dockerfile★ 0↓ 31.5K/moOct 1, 2026
MITOct 1, 2026 · metrics 2.10.0
Go
20At Riskhealth index
amadeobrands/aw
A flexible P2P networking library for upgradable distributed systems.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
—
20At Riskhealth index
amaltson/terraform
Terraform is a tool for building, changing, and combining infrastructure safely and efficiently.
Go★ 0Sep 19, 2026
MPL-2.0Sep 19, 2026 · metrics 2.10.0