Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,437
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,760 recordsRanked by popularity · browse by tag · record statistics
crates.io
33At Riskhealth index
weso/pgschemapc
Property graph schemas with Property constraints
Rust★ 3Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
PyPI
12Criticalhealth index
whole-tale/girder_wholetale
Girder plugin providing basic Whole Tale functionality
Python★ 3Oct 21, 2026
BSD-3-ClauseOct 21, 2026 · metrics 2.10.0
—
21At Riskhealth index
xdg/scram
Legacy scram library → use xdg-go/scram instead
Go★ 3Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
26At Riskhealth index
AdminBenni/iota-mixing
Linter which checks for mixing unrelated consts with iota-s in the same const block.
Go★ 2Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
22At Riskhealth index
ArtisanCloud/PowerSocialite
No repository description published.
Go★ 2Oct 18, 2026
No licenseOct 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
BluMintInc/eslint-custom-rules
Custom rules for use in BluMint repositories.
TypeScript★ 2↓ 5,211/moOct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
ElsevierSoftwareX/SOFTX-D-20-00001
Microstructure modeling, mesh generation, analysis, and visualization. To cite this software publication: https://www.sciencedirect.com/science/article/pii/S2352711020303083
Python★ 2Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
Hccake/ballcat
😸一个快速开发脚手架,快速搭建企业级后台管理系统,并提供多种便捷starter进行功能扩展。主要功能包括前后台用户分离,菜单权限,数据权限,定时任务,访问日志,操作日志,异常日志,统一异常处理,XSS过滤,SQL防注入,国际化 等多种功能
Java★ 2Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
11Criticalhealth index
Klarrio/kafka-proxy
Proxy connections to Kafka cluster. Connect through SOCKS Proxy, HTTP Proxy or to cluster running in Kubernetes.
Go★ 2Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
10Criticalhealth index
LF-Engineering/aws-lambda-go-api-proxy
lambda-go-api-proxy makes it easy to port APIs written with Go frameworks such as Gin (https://gin-gonic.github.io/gin/ ) to AWS Lambda and Amazon API Gateway.
Go★ 2Oct 20, 2026
Apache-2.0Oct 20, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
OpenTTD/py-protocol
OpenTTD's wire protocol as Python library
Python★ 2↓ 122/moOct 18, 2026
LGPL-2.1Oct 18, 2026 · metrics 2.10.0
npm
8Criticalhealth index
QwantResearch/webrtc-swarm
Create a swarm of p2p connections using webrtc and a signalhub
JavaScript★ 2Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
—
24At Riskhealth index
adbancroft/avr-fast-div
Optimized integer division for AVR hardware
C++★ 2Oct 22, 2026
LGPL-2.1Oct 22, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
addr-rs/psl-types
Common types for the public suffix implementation crates
Rust★ 2↓ 6.3M/moOct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go · npm
6Criticalhealth index
anmaslov/simple-rag
No repository description published.
Go · Vue★ 2Oct 19, 2026
No licenseOct 19, 2026 · metrics 2.10.0
PyPI · npm
12Criticalhealth index
arazshah/smart_spatial_system
Plugin-based GeoAI system: natural-language questions become QuerySpecs, DAG plans and map layers, tables and PDF reports. Built on geochat-platform.
Python★ 2↓ 2,773/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
RubyGems
15Criticalhealth index
arthurschreiber/rugged
ruby bindings to libgit2
C · Ruby★ 2Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
19Criticalhealth index
bakito/gws
Google Cloud Workstation CLI
Go★ 2Oct 19, 2026
Apache-2.0Oct 19, 2026 · metrics 2.10.0
PyPI
48Weakhealth index
bdraco/chacha20poly1305-reuseable
A reusable version of ChaCha20Poly1305 for use with cryptography and asyncio
Python★ 2↓ 256.5K/moOct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
npm
20At Riskhealth index
canfoundation/cif-js
No repository description published.
TypeScript★ 2↓ 114/moOct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Go
20At Riskhealth index
cerc-io/ipld-eth-beacon-indexer
Read-only mirror of https://git.vdb.to/cerc-io/ipld-eth-beacon-indexer (This application will capture all the BeaconState's and SignedBeaconBlock's from the consensus chain on Ethereum.)
Go★ 2Oct 19, 2026
AGPL-3.0Oct 19, 2026 · metrics 2.10.0
Go
18Criticalhealth index
dotcommander/repomap
Token-budgeted repository maps for LLM context windows — scan, parse, rank, budget, format. Go library + CLI.
Go★ 2Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0
Go
27At Riskhealth index
easyp-tech/service
gRPC service for running protobuf plugins in Docker containers
Go★ 2Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
npm · PyPI
19Criticalhealth index
fabionfsc/nuzo-memory
Local-first, auditable memory for Codex, Claude Code, and MCP-compatible AI agents.
TypeScript · JavaScript★ 2↓ 352/moOct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go · npm · PyPI
34At Riskhealth index
hanzoai/ingress
Hanzo Ingress -- cloud-native, Kubernetes-native L7 reverse proxy and load balancer for Hanzo AI infrastructure (automatic TLS, dynamic config, zero-downtime reloads).
Go★ 2Oct 21, 2026
MITOct 21, 2026 · metrics 2.10.0