Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,491
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,240 recordsRanked by popularity · browse by tag · record statistics
Go
23At Riskhealth index
Bedrock-OSS/go-burrito
No repository description published.
Go★ 3Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
10Criticalhealth index
Consensys/go-ethereum
Official golang implementation of the Ethereum protocol
Go · C★ 3Aug 3, 2026
LGPL-3.0Aug 3, 2026 · metrics 2.10.0
RubyGems · crates.io
19Criticalhealth index
DataDog/libddprof
libddprof has been renamed to libdatadog and development has moved to https://github.com/datadog/libdatadog
Rust★ 3Aug 23, 2026
Apache-2.0Aug 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
DataDog/viper
Go configuration with fangs
Go★ 3Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
Go
11Criticalhealth index
Erda-project/Erda-proto-go
Generated code for Erda protobuf data modals and protocols.
Shell · Makefile★ 3Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.10.0
npm
20At Riskhealth index
Ethan-Arrowood/undici
An HTTP/1.1 client, written from scratch for Node.js
JavaScript★ 3Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
npm
20At Riskhealth index
HubSpotWebTeam/wt-eslint-browser
This is a list of ESLint rules that are recommended for use with Hubspot Marketing WebTeam projects.
JavaScript★ 3↓ 2,780/moSep 3, 2026
No licenseSep 3, 2026 · metrics 2.10.0
Go
13Criticalhealth index
K-Phoen/sdk
Library for using Grafana' structures in Go programs and client for Grafana REST API.
Go★ 3Aug 20, 2026
Apache-2.0Aug 20, 2026 · metrics 2.10.0
Packagist
28At Riskhealth index
PrestaShopCorp/module-lib-mbo-installer
A helper to ease the download and unzip of modules from the Addons Marketplace
PHP★ 3↓ 2,584/moJul 29, 2026
OSL-3.0Jul 29, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
RumovZ/android-tzdata
Parser for the Android-specific tzdata file
Rust★ 3↓ 3.4M/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
npm
14Criticalhealth index
ahmed-dinar/codeforces-api-node
Codeforces API Client Library for Node.js
JavaScript★ 3↓ 41/moAug 26, 2026
MITAug 26, 2026 · metrics 2.10.0
Go
24At Riskhealth index
bahlo/generic-list-go
Go container/list but with generics.
Go★ 3Jul 28, 2026
BSD-3-ClauseJul 28, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
blocklessnetwork/car-utils
No repository description published.
Rust★ 3↓ 55/moAug 25, 2026
MITAug 25, 2026 · metrics 2.10.0
npm · Maven
19Criticalhealth index
bloxbean/yano
A Cardano data node written in Java, powered by Yaci
Java★ 3↓ 2,078/moAug 26, 2026
MITAug 26, 2026 · metrics 2.10.0
Go
19Criticalhealth index
cmtonkinson/governator
Structured, architecture-first orchestration for autonomous, multi-agent development.
Go★ 3Aug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
Maven
18Criticalhealth index
codehaus-plexus/plexus-cipher
No repository description published.
Java★ 3Aug 21, 2026
Apache-2.0Aug 21, 2026 · metrics 2.10.0
npm
20At Riskhealth index
coderofstuff/hw-app-kaspa
Ledger JS library for kaspa
TypeScript★ 3Jul 23, 2026
No licenseJul 23, 2026 · metrics 2.10.0
Go
15Criticalhealth index
colt3k/utils
Numerous utility libraries and tools
Go★ 3Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
Go
16Criticalhealth index
datadog/btfhub-online-go
## Auto-archived due to inactivity. ## Golang client to communicate with the BTFHub online server
Go · Makefile★ 3Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
Go
30At Riskhealth index
dicedb/dicedb-go-defunct
GO SDK for DiceDB
Go★ 3Jul 25, 2026
BSD-2-ClauseJul 25, 2026 · metrics 2.10.0
npm
17Criticalhealth index
edsdk/n1ed-react
Official N1ED React component
TypeScript★ 3↓ 90.3M/moAug 4, 2026
LGPL-3.0Aug 4, 2026 · metrics 2.10.0
28At Riskhealth index
feather-wallet/monero
Monero: the secure, private, untraceable cryptocurrency
C++ · C★ 3Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
crates.io
11Criticalhealth index
fomalhaut88/bigi
No repository description published.
Rust★ 3Aug 23, 2026
No licenseAug 23, 2026 · metrics 2.10.0
Go
17Criticalhealth index
go-fed/oauth2
OAuth 2.0 server library for the Go programming language.
Go★ 3Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
Packagist · npm
16Criticalhealth index
goalgorilla/open_social_scripts
Contains scripts for Open Social that are not generic enough to be in the Distro (e.g. Docker installation)
PHP · Shell · JavaScript★ 3↓ 3,082/moAug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
npm · PyPI
23At Riskhealth index
hintjens/zyre
Zyre - an open-source framework for proximity-based peer-to-peer applications
C · C++★ 3↓ 37/moSep 5, 2026
MPL-2.0Sep 5, 2026 · metrics 2.10.0