Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,519
Monthly downloads under inspection
590B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,620 recordsRanked by popularity · browse by tag · record statistics
npm
17Criticalhealth index
CoffeeScript★ 0↓ 16/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
ninahakansson/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
16Criticalhealth index
njgheorghita/go-ethereum
Official Go implementation of the Ethereum protocol
Go★ 0Jul 26, 2026
LGPL-3.0Jul 26, 2026 · metrics 2.10.0
Go
16Criticalhealth index
nlink-jp/mcp-guardian
MCP governance proxy - zero-dependency single binary (Go)
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
7Criticalhealth index
nomad-nmr/convert-to-nmrium
No repository description published.
JavaScript★ 0↓ 11/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
NuGet
20At Riskhealth index
nopara73/NBitcoin
Comprehensive Bitcoin library for the .NET framework.
C#★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
noshiro-pf/ts-fortress
TypeScript-first schema validation library with static type inference.
TypeScript★ 0Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
npm
19Criticalhealth index
ntnyq/load-oxfmt-config
:package: Load .oxfmtrc.json(c) for oxfmt.
TypeScript★ 0↓ 36.1K/moSep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
19Criticalhealth index
nunocgoncalves/forge
Historical source frozen at the monorepo import head. Active development: https://github.com/nunocgoncalves/iterabase-mono
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
24At Riskhealth index
nuttycom/zips
Zcash Improvement Proposals
TeX★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
20At Riskhealth index
ocaml-dune/cmdliner
Declarative definition of command line interfaces for OCaml
OCaml★ 0Jul 27, 2026
ISCJul 27, 2026 · metrics 2.10.0
Go
28At Riskhealth index
ogenev/go-ethereum
Official Go implementation of the Ethereum protocol
Go★ 0Jul 26, 2026
LGPL-3.0Jul 26, 2026 · metrics 2.10.0
Go
18Criticalhealth index
ohdat/app
No repository description published.
Go★ 0Sep 11, 2026
No licenseSep 11, 2026 · metrics 2.10.0
npm · PyPI
36Weakhealth index
ojarjur/jupyter_server
The backend—i.e. core services, APIs, and REST endpoints—to Jupyter web applications.
Python★ 0Jul 25, 2026
BSD-3-ClauseJul 25, 2026 · metrics 2.10.0
Go
20At Riskhealth index
okhowang/gocache
☔️ A complete Go cache library that brings you multiple ways of managing your caches
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Maven
20At Riskhealth index
omribahumi/async-profiler
Sampling CPU and HEAP profiler for Java featuring AsyncGetCallTrace + perf_events
C++ · Java★ 0Aug 23, 2026
Apache-2.0Aug 23, 2026 · metrics 2.10.0
npm
26At Riskhealth index
onestep/gmail.js
Gmail JavaScript API
JavaScript★ 0Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
Packagist
40Weakhealth index
openeuropa/task-runner-drupal-project-symlink
Task Runner command to symlink a Drupal project codebase within a development site, built locally via Composer.
PHP★ 0↓ 1,566/moAug 13, 2026
EUPL-1.2Aug 13, 2026 · metrics 2.10.0
npm
15Criticalhealth index
openlattice/redux-reqseq
No repository description published.
JavaScript★ 0↓ 76/moSep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go · crates.io
14Criticalhealth index
openrequestprotocol/orp
An open, federated protocol for recipient-sovereign requests.
Rust · Go★ 0Aug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
Packagist
35Weakhealth index
oroinc/gridfs-config
OroGridFsConfigBundle provides configuration enhancements for Oro applications to enable usage of GridFS Documentation as filesystem.
PHP · Rich Text Format★ 0↓ 5,903/moJul 28, 2026
Custom licenseJul 28, 2026 · metrics 2.10.0
15Criticalhealth index
ouotuo/go-knife
No repository description published.
Go★ 0Sep 10, 2026
No licenseSep 10, 2026 · metrics 2.10.0
crates.io
10Criticalhealth index
paiml/batuta-common
MOVED → https://github.com/paiml/aprender (crates/aprender-common)
Rust★ 0↓ 5,972/moAug 30, 2026
No licenseAug 30, 2026 · metrics 2.10.0
RubyGems
19Criticalhealth index
panorama-ed/panolint
Rules for linting ruby code at Panorama Education
Ruby★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
pascalkuthe/helix
A post-modern modal text editor.
Rust · Scheme★ 0↓ 204/moJul 26, 2026
MPL-2.0Jul 26, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
patrickb314/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
paulRbr/bump-cli
Bump.sh CLI - Deploy your OpenAPI & AsyncAPI documentations from your CI
Ruby★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0