Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,331
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
4,233 recordsRanked by popularity · browse by tag · record statistics
PyPI
26At Riskhealth index
jon4than/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
11Criticalhealth index
jonspring/tidytuesday
Official repo for the #tidytuesday project
R★ 0Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
crates.io
24At Riskhealth index
josephlr/x86_64
Library to program x86_64 hardware.
Rust★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Go
26At Riskhealth index
joshbressers/grype
A vulnerability scanner for container images and filesystems
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
17Criticalhealth index
jphickey/osal
The Core Flight System (cFS) Operating System Abstraction Layer (OSAL)
C★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
Go
25At Riskhealth index
jregovic/telegraf
The plugin-driven server agent for collecting & reporting metrics.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
18Criticalhealth index
jrieken/omnisharp-vscode
Official C# support for Visual Studio Code (powered by OmniSharp)
TypeScript★ 0↓ 35/moJul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Go · npm · PyPI
24At Riskhealth index
jspdown/traefik
The Cloud Native Edge Router
Go★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Go · npm
23At Riskhealth index
jspdown/traefik-playground
A web-based development environment for experimenting with Traefik configurations
Go · JavaScript★ 0Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
jtmoon79/chrono
Date and time library for Rust
Rust★ 0Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 2.10.0
Go
30At Riskhealth index
junczhu/oras
ORAS CLI
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
14Criticalhealth index
jursonmo/evio
Fast event-loop networking for Go
Go★ 0Aug 13, 2026
MITAug 13, 2026 · metrics 2.10.0
Go
18Criticalhealth index
kadaan/telegraf
The plugin-driven server agent for collecting & reporting metrics.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
npm
18Criticalhealth index
kaelig/html5-boilerplate
A professional front-end template for building fast, robust, and adaptable web apps or sites.
JavaScript · CSS · HTML★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Go
19Criticalhealth index
kaptinlin/orderedobject
Go library for ordered key-value objects with type safety, JSON support, and map conversion
Go★ 0Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Go
17Criticalhealth index
karan-batavia/gjson
Get JSON values quickly - JSON parser for Go
Go★ 0Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
npm · Packagist · RubyGems
20At Riskhealth index
kartik-v/bootstrap
The most popular HTML, CSS, and JavaScript framework for developing responsive, mobile first projects on the web.
CSS · JavaScript · HTML★ 0Aug 10, 2026
MITAug 10, 2026 · metrics 2.10.0
Go
22At Riskhealth index
kasna-cloud/infracost
Cloud cost estimates for Terraform in pull requests💰📉 Love your cloud bill!
Go★ 0Jul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 2.10.0
PyPI
17Criticalhealth index
kdmccormick/tutor
The docker-based Open edX distribution designed for peace of mind
Python★ 0Jul 25, 2026
AGPL-3.0Jul 25, 2026 · metrics 2.10.0
crates.io · PyPI
30At Riskhealth index
keep-starknet-strange/cairo-vm
cairo-rs is a Rust implementation of the Cairo VM. Cairo (CPU Algebraic Intermediate Representation) is a programming language for writing provable programs, where one party can prove to another that a certain computation was executed correctly. Cairo and similar proof systems can be used to provide scalability to blockchains.
Rust · Cairo★ 0Aug 17, 2026
Apache-2.0Aug 17, 2026 · metrics 2.10.0
20At Riskhealth index
kejace/go-ethereum
Jeffrey Wilcke's Go implementation of the Ethereum y/w paper
Go★ 0Aug 24, 2026
LGPL-3.0Aug 24, 2026 · metrics 2.10.0
Hex
29At Riskhealth index
kenichi/web-push-ex
message encryption for web push in elixir
Elixir★ 0↓ 2,043/moJul 31, 2026
MITJul 31, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
kestros/kestros-root-project
Base Kestros project build manager. Contains dependency and plugin versions for building and installing Bundles and Packages to Kestros instances.
Mixed★ 0Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
14Criticalhealth index
kevinburke/justrun
A tool that watches files, and runs possibly long-lived commands when they change.
Go★ 0Sep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
14Criticalhealth index
kevinushey/rstudio
RStudio is an integrated development environment (IDE) for R
Java · C++ · JavaScript★ 0Jul 29, 2026
Custom licenseJul 29, 2026 · metrics 2.10.0
15Criticalhealth index
kevinwern/git
Git Source Code Mirror - This is a publish-only repository and all pull requests are ignored. Please follow Documentation/SubmittingPatches procedure for any of your improvements.
C · Shell★ 0Aug 24, 2026
Custom licenseAug 24, 2026 · metrics 2.10.0
RubyGems
22At Riskhealth index
kheang/active_merchant
Active Merchant is a simple payment abstraction library extracted from Shopify. The aim of the project is to feel natural to Ruby users and to abstract as many parts as possible away from the user to offer a consistent interface across all supported gateways.
Ruby★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
npm
20At Riskhealth index
kid1412621/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
Go
20At Riskhealth index
killianmuldoon/cluster-api
Home for the Cluster Management API work, a subproject of sig-cluster-lifecycle
Go★ 0Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.10.0