Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,252
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
9,906 recordsRanked by popularity · browse by tag · record statistics
crates.io
18Criticalhealth index
yuping322/tikv
Distributed transactional key-value database, originally created to complement TiDB
Rust★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
18Criticalhealth index
z3ntu/openrazer
An entirely open source driver and user-space daemon that allows you to manage your Razer peripherals on GNU/Linux
Python · C★ 0Sep 13, 2026
GPL-2.0Sep 13, 2026 · metrics 2.10.0
Go
25At Riskhealth index
z4ce/snyk-auto-org
A drop in wrapper for the snyk cli that attempts to divine the organization you want for consistent ignores
Go★ 0Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
—
11Criticalhealth index
z825956278/goproxy
基于go写的隧道代理服务器,主要用于翻墙。
Go★ 0Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
npm
31At Riskhealth index
zakodium-oss/react-ocl-nmr
No repository description published.
JavaScript★ 0↓ 3,053/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
crates.io
13Criticalhealth index
zakura-core/zakura-vct-sprout-history
No repository description published.
Rust · Shell★ 0↓ 30.2K/moSep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
—
25At Riskhealth index
zanzaben/osal
The Core Flight System (cFS) Operating System Abstraction Layer (OSAL)
C★ 0Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
34At Riskhealth index
zap-proto/go
ZAP for Go — github.com/zap-proto/go
Go★ 0Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
Go
33At Riskhealth index
zap-proto/http
HTTP request/response over ZAP — drop-in net/http API
Go★ 0Sep 12, 2026
Custom licenseSep 12, 2026 · metrics 2.10.0
npm
34At Riskhealth index
zap-proto/js
ZAP for TypeScript & JavaScript — @zap-proto/zap
TypeScript★ 0↓ 200/moSep 24, 2026
Custom licenseSep 24, 2026 · metrics 2.10.0
npm · Go
34At Riskhealth index
zap-proto/mcp
Model Context Protocol over ZAP — mutually authenticated, non-repudiable
TypeScript · Go★ 0↓ 19/moOct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
32At Riskhealth index
zap-proto/zip
ZAP-native web framework (gofiber v3) — one framework for every Go binary; ZAP primary, HTTP extra, MCP for free
Go★ 0Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
17Criticalhealth index
zeltox/websocket
Minimal and idiomatic WebSocket library for Go
Go★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
25At Riskhealth index
zenreach/smallstep-certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
Go★ 0Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go · PyPI
32At Riskhealth index
zer0se7en/fabric
Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. Its modular and versatile design satisfies a broad range of industry use cases. It offers a unique approach to consensus that enables performance at scale while preserving privacy.
Go★ 0Sep 8, 2026
Apache-2.0Sep 8, 2026 · metrics 2.10.0
—
12Criticalhealth index
zerok/vault-spec
A helper for enforcing a certain Vault structure
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
21At Riskhealth index
zeromberto/go-auth0
Go client library for the Auth0 platform.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
15Criticalhealth index
zeroshade/parquet-go
pure golang library for reading/writing parquet file
Go★ 0Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
32At Riskhealth index
zhagnlu/milvus
Vector database for scalable similarity search and AI applications.
Go · Python · C++★ 0Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
20At Riskhealth index
zhill/syft
CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Go★ 0Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
Go
19Criticalhealth index
zhubert/erg
Workflow-driven autonomous coding daemon for Claude Code
Go★ 0Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
16Criticalhealth index
zjkmxy/generic
A collection of generic data structures written in Go.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
18Criticalhealth index
zonewave/diff
A library for diffing golang structures
Go★ 0Oct 18, 2026
MPL-2.0Oct 18, 2026 · metrics 2.10.0
Go
28At Riskhealth index
zqzten/kubevirt
Kubernetes Virtualization API and runtime in order to define and manage virtual machines.
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Go
19Criticalhealth index
zrma/sema
Archived historical reference — deterministic multiplayer match composition engine
Go★ 0Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
19Criticalhealth index
zuoyong8/Sia
定制化Sia节点,从consensus接口获取交易数据
Go★ 0Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go · PyPI
31At Riskhealth index
zvlb/argocd-operator
A Kubernetes operator for managing Argo CD clusters.
Go★ 0Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0