Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,577
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,297 recordsRanked by popularity · browse by tag · record statistics
Go
17Criticalhealth index
ccoveille-forks/tidwall-gjson
Get JSON values quickly - JSON parser for Go
Go★ 0Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
14Criticalhealth index
cdennig/diff
A library for diffing golang structures
Go★ 0Oct 18, 2026
MPL-2.0Oct 18, 2026 · metrics 2.10.0
Go
17Criticalhealth index
cequenceai/icap
No repository description published.
Go★ 0Sep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
PyPI
14Criticalhealth index
cesardraw2/swagger_meqa
Auto generate and run tests using swagger/OpenAPI spec, no coding needed
Go · Python★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go · npm
26At Riskhealth index
ch007m/vault
A tool for secrets management, encryption as a service, and privileged access management
Go · JavaScript★ 0Oct 21, 2026
MPL-2.0Oct 21, 2026 · metrics 2.10.0
crates.io
32At Riskhealth index
chainflip-io/ethabi
ethabi no_std support
Rust★ 0Sep 24, 2026
Apache-2.0Sep 24, 2026 · metrics 2.10.0
Go
19Criticalhealth index
chapin666/diff
A library for diffing golang structures
Go★ 0Oct 18, 2026
MPL-2.0Oct 18, 2026 · metrics 2.10.0
—
14Criticalhealth index
charlesm93/math
Stan Math Library
C++★ 0Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
Go
12Criticalhealth index
charlienet/go-misc
No repository description published.
Go★ 0Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go · npm · PyPI
38Weakhealth index
chatton/ibc-go
Inter-Blockchain Communication Protocol (IBC) implementation in Golang.
Go★ 0Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
chatwoot/devise-secure_password
A password policy enforcement extension for devise.
Ruby★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
43Weakhealth index
chaudum/loki
Like Prometheus, but for logs.
Go★ 0Sep 13, 2026
AGPL-3.0Sep 13, 2026 · metrics 2.10.0
—
19Criticalhealth index
chaynes-ws/machine
Machine management for a container-centric world
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
npm
14Criticalhealth index
cheminfo-js/nmr-predictor
NMR chemical shift predictor
JavaScript★ 0↓ 469/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
23At Riskhealth index
cheminfo-js/nmr-range
ACS, NMR-J formater; Resurrect a range from ACS string
JavaScript★ 0↓ 12/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
23At Riskhealth index
chemist/ksonnet
A CLI-supported framework that streamlines writing and deployment of Kubernetes configurations to multiple clusters.
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
chenxiao0228/bazel-gazelle
Gazelle is a Bazel build file generator for Bazel projects. It natively supports Go and protobuf, and it may be extended to support new languages and custom rule sets.
Go★ 0Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
—
14Criticalhealth index
chenz85/oauth1
Go OAuth1 http://godoc.org/github.com/dghubble/oauth1
Go★ 0Oct 23, 2026
MITOct 23, 2026 · metrics 2.10.0
Go
13Criticalhealth index
chinaerserver/getty
a netty like asynchronous network I/O library based on tcp/udp/websocket; a bidirectional RPC framework based on JSON/Protobuf; a microservice framework based on zookeeper/etcd
Go★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
14Criticalhealth index
chitoku-k/bosh_exporter
BOSH Prometheus Exporter
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
19Criticalhealth index
chrisns/sandbox-probe
Agentic sandbox enumeration: find security issues, and seed escape automation.
Go★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
—
14Criticalhealth index
chrissnell/polymur
A fast and flexible Graphite relay + HTTPS forwarder toolset
Go★ 0Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
christianversloot/satpy
Python package for earth-observing satellite data processing
Python★ 0Sep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
15Criticalhealth index
chrisvaughn/f1viewer
🏎️ TUI for F1TV
Go★ 0Sep 19, 2026
GPL-3.0Sep 19, 2026 · metrics 2.10.0
Go · npm
16Criticalhealth index
chrkl/cli
Simple set of commands to manage a Kyma installation
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
17Criticalhealth index
chronolaw/lua-nginx-module
Embed the Power of Lua into NGINX HTTP servers
C★ 0Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
15Criticalhealth index
chuangmaoye/sftp
SFTP support for the go.crypto/ssh package
Go★ 0Sep 20, 2026
BSD-2-ClauseSep 20, 2026 · metrics 2.10.0
Go
20At Riskhealth index
cib009/go-shopify
Go client for the Shopify API
Go★ 0Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
12Criticalhealth index
circlesac/credentials-go
Official Circles credential provider for Go
Go★ 0Sep 24, 2026
MITSep 24, 2026 · metrics 2.10.0
npm
22At Riskhealth index
ckohen/discord-api-types
Up to date Discord API Typings, versioned by the API version
TypeScript★ 0Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0