Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,111
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,390 recordsRanked by popularity · browse by tag · record statistics
Go
17Criticalhealth index
0x0FACED/sval
sval is a simple struct validator that can be fully configured through config file
Go★ 1Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
RubyGems
43Weakhealth index
18F/identity-validations
A gem to provide validators that can be used across multiple repositories.
Ruby★ 1Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
23At Riskhealth index
AlexanderGrooff/jinja-go
Jinja library that acts just like the Python Jinja library but written in Golang
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
24At Riskhealth index
AlexanderMac/gosu
A package for self updating Go applications
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
Axione/horus
Horus is a distributed tool to collect snmp and icmp metrics from various network equipments and send the results to kafka, NATS.io, prometheus, and/or influxDB
Go★ 1Sep 18, 2026
Custom licenseSep 18, 2026 · metrics 2.10.0
crates.io
19Criticalhealth index
BurntSushi/semver
Semantic version parsing and comparison.
Rust★ 1Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
ClickHouse/annoy
Approximate Nearest Neighbors in C++/Python optimized for memory usage and loading/saving to disk
C++ · Python · Lua★ 1Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
15Criticalhealth index
DoOR-Team/gophersat
gophersat, a SAT solver in Go
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go · Maven · npm
17Criticalhealth index
EasyDynamics/OSCAL
Open Security Controls Assessment Language (OSCAL)
XSLT★ 1Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
16Criticalhealth index
HeliumProject/rapidjson
Mirror of http://code.google.com/p/rapidjson
C++ · C★ 1Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
20At Riskhealth index
Koeng101/rhea
Golang Rhea parser
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
29At Riskhealth index
LTLA/aarand
Aaron's random distributions for C++
C++★ 1Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
29At Riskhealth index
Moonsong-Labs/compilers
Utilities for working with native solc and compiling projects.
Rust★ 1Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
20At Riskhealth index
Nanyan/heco-chain
HECO-Chain client based on the go-ethereum fork
Go★ 1Sep 19, 2026
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
17Criticalhealth index
OKNoah/wormhole
Secure tunnel
Go★ 1Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
16Criticalhealth index
Ph0m1/Porta
No repository description published.
Go★ 1Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
16Criticalhealth index
Prendo93/m3u8-1
Parser and generator of M3U8-playlists for Apple HLS. Library for Go language. :cinema:
Go★ 1Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
19Criticalhealth index
Qintsg/dsh-safe-delete
Safe delete plugin for DeepSeek Harness (DSH): move files to trash / staging area instead of permanent removal, with restore and purge support.
TypeScript★ 1↓ 614/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
Robot-Inventor/eslint-config
My ESLint config preset
TypeScript★ 1↓ 5,075/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
22At Riskhealth index
SWAN-community/swift-go
Shared Web InFormaTion (SWIFT) - an open source cryptographically secure web solution for sharing information across domains implemented in Go
Go★ 1Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
10Criticalhealth index
Unity-Technologies/master
Converts protocol buffers to Avro.
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
YujiSuzuki/ai-sandbox-dkmcp
Secure AI sandbox for Claude Code / Gemini — hide secrets, enable cross-container access
Go · Shell★ 1Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
17Criticalhealth index
abroudoux/dk
🦧 ❤️ 🐳 A minimalist TUI to interract faster with Docker
Go★ 1Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist · npm
32At Riskhealth index
achttienvijftien/wp-extras
No repository description published.
PHP★ 1↓ 7,925/moSep 22, 2026
GPL-3.0Sep 22, 2026 · metrics 2.10.0
19Criticalhealth index
andreaskoch/dee-cli
Cross-platform command-line utility for DNS updates via DNSimple
Go★ 1Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
15Criticalhealth index
apto/keydb
Key/value data/query API to use on the server or in the browser.
JavaScript★ 1↓ 181/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
11Criticalhealth index
array2d/kvspace-go
No repository description published.
Go★ 1Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0