Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,407
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,236 recordsRanked by popularity · browse by tag · record statistics
RubyGems
30At Riskhealth index
pubid/pubid-core
No repository description published.
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
pubid/pubid-ieee
PubID spec and implementation for IEEE deliverables
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
pubid/pubid-iso
Implementation of ISO pubid
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
RubyGems
32At Riskhealth index
pubid/pubid-nist
No repository description published.
Ruby★ 1Aug 17, 2026
BSD-2-ClauseAug 17, 2026 · metrics 2.10.0
Go
14Criticalhealth index
pvotal-tech/openweathermap
Go (golang) package for use with openweathermap.org's API.
Go★ 1Aug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Maven
8Criticalhealth index
qbit-spark/INSTANTLY-SMS-CATCH
No repository description published.
Java★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
npm
3Criticalhealth index
Vue · JavaScript · CSS★ 1Aug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
4Criticalhealth index
rivet-design/rivet
Visual AI editor for product designers
Mixed★ 1Jul 15, 2026
No licenseJul 15, 2026 · metrics 2.10.0
crates.io · Go · npm +1
29At Riskhealth index
rizinorg/rizin-grammar-c
C grammar for tree-sitter
JavaScript★ 1Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
Go
13Criticalhealth index
robottwo/gsh_prime
A modern, POSIX-compatible, generative shell
Go★ 1Aug 13, 2026
GPL-3.0Aug 13, 2026 · metrics 2.10.0
32At Riskhealth index
rok-cesnovar/math
The Stan Math Library is a C++ template library for automatic differentiation of any order using forward, reverse, and mixed modes. It includes a range of built-in functions for probabilistic modeling, linear algebra, and equation solving.
C++★ 1Jul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
ronaldoussoren/cpython
The Python programming language
Python · C★ 1Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 2.10.0
Go
19Criticalhealth index
ronhuafeng/codexsdk-go
Archived: use github.com/ronhuafeng/llm-go/codexsdk; legacy v0.5.1 is immutable
Go · Python★ 1Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Go
19Criticalhealth index
sacloud/monitoring-suite-api-go
Go言語向け さくらのクラウド モニタリングスイート APIライブラリ
Go★ 1Aug 11, 2026
Apache-2.0Aug 11, 2026 · metrics 2.10.0
NuGet
12Criticalhealth index
santedb/santeguard
SanteGuard Audit Repository
JavaScript★ 1Aug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0
23At Riskhealth index
scheibelp/spack
A flexible package manager designed to support multiple versions, configurations, platforms, and compilers.
Python★ 1Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
npm
14Criticalhealth index
shinyoshiaki/werift-dtls
DTLS v1.2 server/client Implementation for TypeScript
TypeScript★ 1Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
Go
30At Riskhealth index
shizhMSFT/notation
No repository description published.
Go★ 1Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/go-web-exact
Webコンテンツ解析
Go★ 1Aug 30, 2026
MITAug 30, 2026 · metrics 2.10.0
Packagist · npm
33At Riskhealth index
silverstripe/documentation-lint
Abstraction around various linters for easy documentation linting for use in Silverstripe CMS supported modules
Shell · JavaScript★ 1↓ 2,654/moAug 4, 2026
BSD-3-ClauseAug 4, 2026 · metrics 2.10.0
19Criticalhealth index
sjmudd/gh-ost
GitHub's Online Schema Change for MySQL
Go★ 1Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
RubyGems
31At Riskhealth index
socketry/sus-fixtures-async
No repository description published.
Ruby★ 1Jul 28, 2026
MITJul 28, 2026 · metrics 2.10.0
19Criticalhealth index
starnop/cri-tools
CLI and validation tools for Kubelet Container Runtime Interface (CRI) .
Go★ 1Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
npm
23At Riskhealth index
stevepeak/gmail.js
Gmail JavaScript API
JavaScript★ 1Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
sudormrfbin/helix
A post-modern modal text editor.
Rust · Scheme★ 1↓ 205/moJul 26, 2026
MPL-2.0Jul 26, 2026 · metrics 2.10.0
NuGet
26At Riskhealth index
talDoFlemis/YggdrasilVinum
No repository description published.
C#★ 1Aug 14, 2026
No licenseAug 14, 2026 · metrics 2.10.0
NuGet
15Criticalhealth index
thornfieldhe/TAF.Core
面向.net core 的个人用框架库
C#★ 1Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
14Criticalhealth index
timemachine3030/html5-boilerplate
starting html/css template. so much goodness baked in by default
JavaScript★ 1Jul 23, 2026
No licenseJul 23, 2026 · metrics 2.10.0