Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
37,331
Monthly downloads under inspection
379B
Median health index
57 Moderate

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Abandonment Malicious dependencies High-risk jurisdiction exposure Inorganic growth
Clear filters
1,288 recordsRanked by popularity · browse by tag · record statistics
Go · npm
11Criticalhealth index
KirillBaranov/figma-map
The ground-truth layer that lets AI coding agents build pixel-perfect UI from Figma.
Go · TypeScript★ 1Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm · crates.io
11Criticalhealth index
ONREZA/nrz-cli
ONREZA platform CLI — dev, build, deploy
Rust★ 1↓ 2,364/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
8Criticalhealth index
anatolijlaptev1991-ctrl/hermes-ru
🇷🇺 Русская локализация Hermes Agent Desktop (Windows). 100% покрытия ключей, defineLocale + build, авто-обновление через npm. Beta-тестирование.
TypeScript · JavaScript★ 1↓ 5,376/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
10Criticalhealth index
assurrussa/outbox
A simple library for implementing the Outbox pattern in Go projects.
Go★ 1Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
—
16Criticalhealth index
aws-beam/eini-beam
An Erlang INI parser
Erlang★ 1Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
21Criticalhealth index
bakatz/telegram-bot-api
Golang bindings for the Telegram Bot API
Go★ 1Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
10Criticalhealth index
batonogov/gitlab-auto-mr
Create MR in GitLab automatically
Go★ 1Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
23Criticalhealth index
bothubchat/bothub
No repository description published.
TypeScript★ 1Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
20Criticalhealth index
cmmoran/go-ora
Pure go oracle client
Go★ 1Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
coherent-oss/pytest-flake8
pytest plugin to run flake8
Python★ 1↓ 521.7K/moJul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
Go
31At riskhealth index
deckhouse/csi-ceph
No repository description published.
Go★ 1Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
24Criticalhealth index
eonx-com/easy-error-handler
[READ ONLY] Provides customizable ready-to-use error handler for applications
PHP★ 1↓ 9,121/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
25Criticalhealth index
eonx-com/easy-utils
[READ-ONLY] Utilities for EonX packages
PHP★ 1↓ 9,305/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
9Criticalhealth index
ghost-vk/asana
No repository description published.
Go★ 1Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Go
26Criticalhealth index
iamxvbaba/td
Telegram client, in Go. (MTProto API)
Go★ 1Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go · npm
45At riskhealth index
luxfi/sdk
▼ LUX Chain SDK for building high performance blockchains on Lux Network.
Go★ 1Jul 19, 2026
BSD-3-ClauseJul 19, 2026 · metrics 1.13.0
Hex
26Criticalhealth index
neilberkman/ex_aws_auth
AWS Signature Version 4 Signing Library - Community-maintained fork
Elixir★ 1↓ 65.9K/moJul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm · crates.io
28Criticalhealth index
owl352/pshenmic-dpp
No repository description published.
Rust · TypeScript★ 1↓ 1,686/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
phplrt/lexer-contracts
[READ ONLY] Subtree split of the phplrt lexer contracts component (see phplrt/phplrt)
PHP★ 1↓ 3,236/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
8Criticalhealth index
pt-main/Lc
Universal processing engine and language toolkit for go. Bytes and strings support. Lc - language creator.
Go★ 1Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
9Criticalhealth index
rezakargar/go-clockwork
A Go port of Clockwork — the PHP debugging toolbar and request inspector that works with the Clockwork browser extension.
Go★ 1Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
10Criticalhealth index
romanSPB15/tui-compose
Легковесный TUI-фреймворк для Go
Go★ 1Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Go
9Criticalhealth index
romanspb15/go-tui
Легковесный TUI-фреймворк для Go
Go★ 1Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
41At riskhealth index
skarm/kalkan
Go API for KalkanCrypt SDK and the national cryptographic standards of the Republic of Kazakhstan: CMS, XML/WS-Security signatures, hashing, certificates, OCSP/TSA, and ZIP containers.
Go★ 1Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
27Criticalhealth index
squarefi-tech/bff-api-module-npm
No repository description published.
TypeScript★ 1↓ 4,058/moJul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
Go
10Criticalhealth index
AcidSailor/mcpkit
Go library of shared primitives for building MCP servers on the official modelcontextprotocol/go-sdk
Go★ 0Jul 20, 2026
AGPL-3.0Jul 20, 2026 · metrics 1.13.0
Go
6Criticalhealth index
Ali-Farhadnia/divarcrowler
No repository description published.
Go★ 0Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0