Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,973
Monthly downloads under inspection
651B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,348 recordsRanked by popularity · browse by tag · record statistics
—
20At Riskhealth index
interlynk-io/sbomdb
Database for SBOMs in the Interlynk's public SBOM repository
Mixed★ 2Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
RubyGems
30At Riskhealth index
ioquatix/fiber-annotation
No repository description published.
Ruby★ 2Sep 10, 2026
MITSep 10, 2026 · metrics 2.10.0
Go
19Criticalhealth index
irbis-sh/zen-core
Foundational library for Zen products.
Go · TypeScript★ 2Oct 12, 2026
MITOct 12, 2026 · metrics 2.10.0
Go
19Criticalhealth index
ishinova/gh-user-attachments
GitHub CLI extension that uploads 2–10 supported files to user-attachments and prints finalized URLs.
Go★ 2Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
npm
20At Riskhealth index
ivangabriele/loading-spinner
Highly customizable loading spinner for NodeJS.
JavaScript★ 2↓ 33.5K/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Go
25At Riskhealth index
iwdgo/sigintwindows
Sending ctrl-break to a sub-process on Windows to trigger graceful exit.
Go★ 2Sep 23, 2026
BSD-3-ClauseSep 23, 2026 · metrics 2.10.0
—
7Criticalhealth index
jebrosen/nseg
NCBI nseg, modified to be more compliant with recent C compilers
Objective-C · C★ 2Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
23At Riskhealth index
jlelong/vscode-extend-language
Generate a new language configuration file for VS Code by extending an existing one
JavaScript★ 2↓ 1,109/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
32At Riskhealth index
juspay/newman
Newman is a command-line collection runner for Postman
JavaScript★ 2Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
npm
19Criticalhealth index
k11k-labs/better-blocks-react-renderer
Merged into the strapi-plugin-better-blocks monorepo — development continues at https://github.com/k11k-labs/strapi-plugin-better-blocks (packages/better-blocks-react-renderer). This repository is archived; its full history was preserved in the merge.
TypeScript★ 2Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
PyPI
23At Riskhealth index
kapilt/cloud-custodian
Policy rules engine for aws management, policies in yaml for query, filter, and take actions on resources
Python★ 2Oct 17, 2026
Apache-2.0Oct 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
kaptinlin/jsonpatch
Go library for JSON Patch (RFC 6902) with extended operations and JSON Predicate support
Go★ 2Oct 22, 2026
MITOct 22, 2026 · metrics 2.10.0
—
19Criticalhealth index
kenttonino/BaseShift
A number system converter.
C★ 2Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
Go
28At Riskhealth index
koh-yoshimoto/mysql-mcp-server
A Model Context Protocol (MCP) server that enables AI assistants to interact with MySQL databases. Query execution, schema inspection, and seamless integration with Claude, Cursor, and VSCode.
Go · JavaScript★ 2Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
12Criticalhealth index
kubemq-io/gosoline
Gosoline is our framework which fuels all of our Golang applications
Go★ 2Oct 21, 2026
No licenseOct 21, 2026 · metrics 2.10.0
npm
19Criticalhealth index
logto-io/toolkit
🧰 Logto standard toolkit.
TypeScript · SCSS★ 2↓ 11.4K/moOct 6, 2026
MITOct 6, 2026 · metrics 2.10.0
RubyGems
25At Riskhealth index
lyndsey-ferguson/xctest_list
Collects a list of all the tests in a Xcode test bundle or test runner
Ruby★ 2Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
6Criticalhealth index
marten-seemann/tcp
Package tcp implements TCP-level socket options
Go★ 2Sep 23, 2026
BSD-2-ClauseSep 23, 2026 · metrics 2.10.0
RubyGems
23At Riskhealth index
mastodon/webpush
webpush, Encryption Utilities for Web Push protocol
Ruby★ 2Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
14Criticalhealth index
mattermost/eslint-plugin-mattermost
Archived ESLint plugin for Mattermost code. Moved to the monorepo: https://github.com/mattermost/mattermost
JavaScript★ 2Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
22At Riskhealth index
mercury-hpc/mchecksum
Generic checksum library.
C · CMake★ 2Sep 25, 2026
BSD-3-ClauseSep 25, 2026 · metrics 2.10.0
Go
29At Riskhealth index
messi-yang/ggol
Inspired by Conway's Game of Life, built for more possibilities!
Go★ 2Oct 16, 2026
MITOct 16, 2026 · metrics 2.10.0
RubyGems
20At Riskhealth index
mlibrary/handle_rest
ruby interface to handle REST api
Ruby · Shell★ 2Sep 22, 2026
Custom licenseSep 22, 2026 · metrics 2.10.0
npm
26At Riskhealth index
molbiodiv/biojs-io-biom
Parses biom files
JavaScript★ 2↓ 90/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
—
13Criticalhealth index
mqom/mqom-v2
MQOM v2 Digital Signature Scheme
C★ 2Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
—
3Criticalhealth index
mrg1995/MyWorkExperience
个人工作学习中的点滴记录
Python★ 2Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
PyPI
22At Riskhealth index
mrya-lang/Mrya
Mrya language
Python★ 2Oct 23, 2026
Custom licenseOct 23, 2026 · metrics 2.10.0
Go
20At Riskhealth index
mtibben/percent
Package percent escapes strings using percent-encoding
Go★ 2Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
20At Riskhealth index
mudler/cOS-toolkit
:snowflake: cOS is a toolkit to build, ship and maintain cloud-init driven Linux derivatives based on container images
Shell · Go · HCL★ 2Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0