Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,115
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
50 recordsRanked by popularity · browse by tag · record statistics
npm
32At Riskhealth index
wert-io/widget-initializer
Public NPM library for Wert partners to integrate. Also published to https://javascript.wert.io
JavaScript · TypeScript★ 6↓ 16.4K/moSep 5, 2026
No licenseSep 5, 2026 · metrics 2.10.0
Maven
25At Riskhealth index
bootique/bootique-jdbc
JDBC DataSource integration with Bootique
Java★ 5Aug 31, 2026
Apache-2.0Aug 31, 2026 · metrics 2.10.0
Packagist
18Criticalhealth index
moonshine-software/import-export
No repository description published.
PHP★ 4↓ 2,055/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
luxfi/node
Lux blockchain node — multi-consensus, post-quantum ready
Go★ 3Sep 5, 2026
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
26At Riskhealth index
natural-transformation/spoonbill
A server-side single-page application framework for Scala — build reactive web apps with no JavaScript (formerly Korolev)
Scala★ 3Sep 4, 2026
Apache-2.0Sep 4, 2026 · metrics 2.10.0
Go
34At Riskhealth index
aiven/go-api-schemas
A tool for generating and persisting user configuration option schemas from Aiven APIs
Go★ 1Sep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
7Criticalhealth index
wmentor/html
HTML data fetcher
Go★ 1Sep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
Go
6Criticalhealth index
1azar/cogito
A modular, type-safe LLM agent framework for Go
Go★ 0Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
Go
5Criticalhealth index
LammoGit/Deltarune-Save-Manager
A CLI utility to manage Deltarune saves and save slots.
Go★ 0Aug 31, 2026
MITAug 31, 2026 · metrics 2.10.0
Go
29At Riskhealth index
hanzo-ds/go
Hanzo Datastore Go client
Go★ 0Sep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
23At Riskhealth index
hanzo-ds/mock
Mock server for testing Hanzo Datastore clients
Go★ 0Sep 5, 2026
Apache-2.0Sep 5, 2026 · metrics 2.10.0
Go
26At Riskhealth index
hanzoai/csqlite
Self-contained cgo SQLite bindings for Go's database/sql, vendored in-tree
C★ 0Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
Go
32At Riskhealth index
hanzoai/iam
Hanzo IAM v2 — proprietary identity service on zap-proto/zip + hanzoai/orm + hanzoai/base. Clean-room, original work.
Go★ 0Sep 5, 2026
Custom licenseSep 5, 2026 · metrics 2.10.0
Go
32At Riskhealth index
hanzoai/metrics
[ARCHIVED] Superseded by hanzoai/o11y — one subsystem serves metrics, logs and traces at /v1/o11y/*
Go★ 0Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
Go
25At Riskhealth index
hanzoai/sqlcipher
Pure-Go SQLCipher 4 page format — codec, KDF, per-page HMAC. Byte-compatible with SQLCipher 4.
Go★ 0Sep 6, 2026
Custom licenseSep 6, 2026 · metrics 2.10.0
Go
26At Riskhealth index
hanzoai/stream
Mirrored from git.hanzo.ai
Go★ 0Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0
PyPI · Go
34At Riskhealth index
luxfi/zap
Zero-Allocation Protocol for high-performance AI agent communication
Go★ 0Sep 6, 2026
BSD-3-ClauseSep 6, 2026 · metrics 2.10.0
Packagist · npm
11Criticalhealth index
rasuvaeff/understudy
Test double library for PHP with a call-closure API (work in progress)
PHP★ 0↓ 3,000/moSep 5, 2026
BSD-3-ClauseSep 5, 2026 · metrics 2.10.0
Go
9Criticalhealth index
vodolaz095/pkg
shared golang packages
Go★ 0Sep 6, 2026
MITSep 6, 2026 · metrics 2.10.0