Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,299
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,888 recordsRanked by popularity · browse by tag · record statistics
Go
34At Riskhealth index
hanzoai/dbx
A Go (golang) package that enhances the standard database/sql package by providing powerful data retrieval methods as well as DB-agnostic query building capabilities.
Go★ 0Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Go
26At Riskhealth index
hanzoai/decimal
Exact big.Int fixed-point decimal for Go — no precision ceiling, no float
Go★ 0Oct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/docdb
MongoDB-compatible document database
Go★ 0Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
Go
31At Riskhealth index
hanzoai/doctype
DocType — metadata-driven schema primitive in pure Go (Frappe DocType core, no Python runtime)
Go★ 0Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
hanzoai/esign
Self-hosted document e-signature platform, an open source alternative to DocuSign.
TypeScript★ 0Oct 18, 2026
AGPL-3.0Oct 18, 2026 · metrics 2.10.0
Go
22At Riskhealth index
hanzoai/eval
Expression evaluator (Go) forked from casbin/govaluate v1.3.0; package renamed to eval.
Go★ 0Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
crates.io · Go · npm +1
32At Riskhealth index
hanzoai/flags
Feature flags + A/B for the Hanzo platform — one native engine (cloud /v1/flags), SDKs for Go, Python, TypeScript, Rust, C FFI
Go★ 0↓ 7/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
32At Riskhealth index
hanzoai/framework
Hanzo Framework — the Go DocType engine: store, hooks, modules, permissions. Foundation for CMS/ERP/CRM/Helpdesk.
Go★ 0Sep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/gateway
Hanzo Gateway — the stateless trust boundary at api.hanzo.ai: IAM identity, rate limiting, metering and CORS, then a straight forward to cloud. Routing lives in cloud, not here.
Go★ 0Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
hanzoai/go-cosyvoice
No repository description published.
Go★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
34At Riskhealth index
hanzoai/gui
The Hanzo GUI framework — one component model across web, native and desktop, on hanzoai/yoga's grid-capable layout engine. Publishes @hanzo/gui.
TypeScript★ 0↓ 15.2K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
26At Riskhealth index
hanzoai/ha
Single-writer election over a live membership set (HRW/Rendezvous) — Hanzo's HA coordination primitive. No coordinator, lock service, Postgres, or Redis.
Go★ 0Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/iam
Hanzo IAM v2 — proprietary identity service on zap-proto/zip + hanzoai/orm + hanzoai/base. Clean-room, original work.
Go★ 0Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
Go · npm
19Criticalhealth index
hanzoai/iam-v1
RETIRED — superseded by the clean hanzoai/iam (zip-native + hanzoai/orm). Casdoor/Beego fork, no longer in any graph. See hanzoai/iam.
Go · TypeScript★ 0Aug 2, 2026
Custom licenseAug 2, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/iamsdk
Hanzo IAM Go SDK — Go client for Hanzo IAM (forked + renamed from casdoor-go-sdk)
Go★ 0Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/kafka
Hanzo Kafka — the Kafka adaptor. Builds ghcr.io/hanzoai/kafka.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/log
High-performance zero-allocation structured logging for Go
Go★ 0Oct 18, 2026
BSD-3-ClauseOct 18, 2026 · metrics 2.10.0
npm
34At Riskhealth index
hanzoai/logo
Official Hanzo logo package with TypeScript/React components and utilities
TypeScript★ 0↓ 8,679/moSep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
14Criticalhealth index
hanzoai/metrics
[ARCHIVED] Superseded by hanzoai/o11y — one subsystem serves metrics, logs and traces at /v1/o11y/*
Go★ 0Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Go
22At Riskhealth index
hanzoai/mock
Hanzo datastore-native mock (fork of clickhouse-go-mock) — Datastore API for hanzoai/otel-collector tests
Go★ 0Sep 9, 2026
Apache-2.0Sep 9, 2026 · metrics 2.10.0
Go
27At Riskhealth index
hanzoai/money
Exact money (Amount+Currency) for Go on big.Int decimal — fiat + 18-dec crypto, no ceiling
Go★ 0Oct 22, 2026
Custom licenseOct 22, 2026 · metrics 2.10.0
Go
27At Riskhealth index
hanzoai/namespace
No repository description published.
Go★ 0Oct 18, 2026
MITOct 18, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/notify
A dead simple Go library for sending notifications to various messaging services.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go · npm · PyPI
34At Riskhealth index
hanzoai/o11y
Hanzo o11y — OpenTelemetry-native observability (metrics, traces, logs) for the Hanzo platform, backed by Hanzo Datastore.
TypeScript · Go★ 0Oct 20, 2026
Custom licenseOct 20, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/orm
Generics-based ORM for Go — type-safe Model[T] with auto-registration, auto-serialization, KV cache, and multi-backend support (Hanzo SQLite, Hanzo SQL, Hanzo DocDB)
Go★ 0Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/otel-collector
Hanzo O11y Otel Collector — Hanzo's OpenTelemetry Collector distro: ZAP-native + OTLP ingest into hanzoai/datastore
Go★ 0Oct 21, 2026
AGPL-3.0Oct 21, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
hanzoai/python-sdk
Hanzo AI SDK for Python — the complete toolkit: agents, MCP tools, memory, inference, network, cloud, IAM/KMS. Hanzo's most complete SDK.
Python★ 0↓ 44.8K/moOct 6, 2026
Apache-2.0Oct 6, 2026 · metrics 2.10.0
Go · crates.io
34At Riskhealth index
hanzoai/s3
Hanzo S3 — S3-compatible distributed object storage
Go★ 0Sep 21, 2026
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Go
34At Riskhealth index
hanzoai/search-go
Go client for Hanzo Index.
Go★ 0Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
npm
22At Riskhealth index
hanzoai/social
Hanzo Social — publish to every account an org owns
TypeScript★ 0Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0