Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,515
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,290 recordsRanked by popularity · browse by tag · record statistics
npm
25At Riskhealth index
gemini-testing/sql.js
SQLite compiled to JavaScript through Emscripten
JavaScript★ 0↓ 36.1K/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
npm
20At Riskhealth index
genome-nexus/genome-nexus-cli
💻 Command line interface for Genome Nexus 🧬
TypeScript★ 0↓ 65/moOct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
npm
22At Riskhealth index
george-hm/vscode-icons
Icons for Visual Studio Code
TypeScript★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Packagist
24At Riskhealth index
georgringer/mask
TYPO3 Extension Mask
PHP · HTML★ 0Sep 19, 2026
GPL-2.0Sep 19, 2026 · metrics 2.10.0
Go
20At Riskhealth index
geritol/diff
A library for diffing golang structures
Go★ 0Oct 18, 2026
MPL-2.0Oct 18, 2026 · metrics 2.10.0
PyPI
29At Riskhealth index
gerritholl/satpy
Python package for earth-observing satellite data processing
Python★ 0Sep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
19Criticalhealth index
getarcaneapp/updater
https://github.com/getarcaneapp/ki
Go★ 0Oct 21, 2026
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
—
15Criticalhealth index
getoutreach/null
reasonable handling of nullable values
Go★ 0Sep 19, 2026
BSD-2-ClauseSep 19, 2026 · metrics 2.10.0
npm
12Criticalhealth index
gfk-dev/dockership
dead simple docker deploy tool
Go · HTML★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
—
26At Riskhealth index
gfx/h2o
H2O - the optimized HTTP/1, HTTP/2, HTTP/3 server
C · Perl★ 0Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
ggs2ggs/openpilot
No repository description published.
Python · C++★ 0Aug 24, 2026
MITAug 24, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
ghislainp/satpy
Python package for earth-observing satellite data processing
Python★ 0Sep 13, 2026
GPL-3.0Sep 13, 2026 · metrics 2.10.0
Go
26At Riskhealth index
giacomoferretti/add-missing-headers
A Traefik plugin that adds missing HTTP headers to requests and responses without overriding existing headers.
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
20At Riskhealth index
giautm/terraform-ls
Terraform Language Server
Go★ 0Sep 9, 2026
MPL-2.0Sep 9, 2026 · metrics 2.10.0
Maven · npm · Packagist +2
20At Riskhealth index
gitql/vitess
vitess fork meant to be used internally by gitql
Go · PHP★ 0Sep 10, 2026
BSD-3-ClauseSep 10, 2026 · metrics 2.10.0
Go
20At Riskhealth index
giuliano-macedo/diff
A library for diffing golang structures
Go★ 0Oct 18, 2026
MPL-2.0Oct 18, 2026 · metrics 2.10.0
Go
16Criticalhealth index
gkdada/gozt
Go version of zero-touch backup (see ztbackup for C++ version of the same tool). Uses sync method to create/update backup of a specified folder on to local, samba or sftp folders.
Go★ 0Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
—
15Criticalhealth index
gkirok/tsdb-nuclio
No repository description published.
Go★ 0Sep 26, 2026
Apache-2.0Sep 26, 2026 · metrics 2.10.0
npm
26At Riskhealth index
globalworldwide/grpc-resolvers
Custom resolvers for @grpc/grpc-js
TypeScript★ 0↓ 4,274/moOct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
19Criticalhealth index
glocurrency/commons
Common helpers for Golang projects used @ GloCurrency.
Go★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
glycerine/go-git
A highly extensible Git implementation in pure Go.
Go★ 0Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
Go
15Criticalhealth index
gmlewis/emitter-io-go
Go/Golang client for emitter
Go★ 0Sep 19, 2026
EPL-1.0Sep 19, 2026 · metrics 2.10.0
—
20At Riskhealth index
gnarled-cipher/serving
Kubernetes-based, scale-to-zero, request-driven compute
Go★ 0Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
gnosis/gp-transaction-retry
No repository description published.
Rust★ 0Sep 25, 2026
Custom licenseSep 25, 2026 · metrics 2.10.0
Go
19Criticalhealth index
go-go-golems/tiny-idp
No repository description published.
Go★ 0Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
22At Riskhealth index
goarchiver/gosoline
Gosoline is our framework which fuels all of our Golang applications
Go★ 0Oct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
Go
13Criticalhealth index
gochigo/plush
The powerful template system that Go needs
Go★ 0Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
19Criticalhealth index
gofenix/go-mitmproxy
mitmproxy implemented with golang. 用 Golang 实现的中间人攻击(Man-in-the-middle),解析、监测、篡改 HTTP/HTTPS 流量。
Go · TypeScript★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
—
13Criticalhealth index
goller/telegraf
The plugin-driven server agent for collecting & reporting metrics.
Go★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0