Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,546
Monthly downloads under inspection
546B
Median health index
60 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
5,335 recordsRanked by popularity · browse by tag · record statistics
npm
20At Riskhealth index
saschanaz/browser-compat-data
This repository contains compatibility data for Web technologies as displayed on MDN
JSON★ 0Jul 27, 2026
CC0-1.0Jul 27, 2026 · metrics 2.10.0
15Criticalhealth index
satchel9/cetus
专注于稳定、性能和分布式事务的MySQL数据库中间件
C · Perl★ 0Aug 14, 2026
GPL-2.0Aug 14, 2026 · metrics 2.10.0
Go
30At Riskhealth index
schrej/cluster-api
Home for the Cluster Management API work, a subproject of sig-cluster-lifecycle
Go★ 0Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.10.0
Go
20At Riskhealth index
scott-vincent/refresh
No repository description published.
Go★ 0Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
PyPI
19Criticalhealth index
scottwittenburg/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.10.0
16Criticalhealth index
sctyner/tidytuesday
Official repo for the #tidytuesday project
HTML★ 0Sep 7, 2026
CC0-1.0Sep 7, 2026 · metrics 2.10.0
14Criticalhealth index
scuba-hacker/TFT_eSPI
Arduino and PlatformIO IDE compatible TFT library optimised for the Raspberry Pi Pico (RP2040), STM32, ESP8266 and ESP32 that supports different driver chips
C · C++★ 0Aug 22, 2026
Custom licenseAug 22, 2026 · metrics 2.10.0
Go
20At Riskhealth index
sdghchj/swag
Automatically generate RESTful API documentation with Swagger 2.0 for Go.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
Go
28At Riskhealth index
secustor/opentelemetry-operator
Kubernetes Operator for OpenTelemetry Collector
Go★ 0Jul 31, 2026
Apache-2.0Jul 31, 2026 · metrics 2.10.0
PyPI
28At Riskhealth index
seenno/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 2.10.0
Go
30At Riskhealth index
selectel/dedicated-go
Go SDK for Selectel Dedicated Servers
Go★ 0Aug 15, 2026
Apache-2.0Aug 15, 2026 · metrics 2.10.0
Go
19Criticalhealth index
septagon-oss/pk-client
Public client primitives for PlatformKit OSS.
Go★ 0Sep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
19Criticalhealth index
septagon-oss/pk-shared
Shared vocabulary and small primitives for PlatformKit OSS.
Go★ 0Sep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Go
24At Riskhealth index
sergei-dyshel/assh
:computer: make your ssh client smarter
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
PyPI
7Criticalhealth index
seruva19/ayase
Modular media quality metrics toolkit.
Python★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
sfackler/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
22At Riskhealth index
sfuchs79/subsurface
Subsurface divelog program
C++ · C★ 0Jul 27, 2026
GPL-2.0Jul 27, 2026 · metrics 2.10.0
23At Riskhealth index
sfztools/simde
Implementations of SIMD instruction sets for systems which don't natively support them.
C★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
Go
14Criticalhealth index
shadowofcards/go-toolkit
No repository description published.
Go★ 0Aug 11, 2026
No licenseAug 11, 2026 · metrics 2.10.0
Go
38Weakhealth index
shenli/tidb
TiDB is an open source distributed HTAP database compatible with the MySQL protocol
Go★ 0Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.10.0
PyPI
21At Riskhealth index
shinchris/server-client-python
A Python library for the Tableau Server REST API
Python★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0
Go
23At Riskhealth index
shizhMSFT/distribution
The toolkit to pack, ship, store, and deliver container content
Go★ 0Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 2.10.0
Go
17Criticalhealth index
shouni/git-gemini-cli
AIレビューCLI
Go★ 0Aug 28, 2026
MITAug 28, 2026 · metrics 2.10.0
Go
19Criticalhealth index
shouni/go-manga-kit
漫画生成ツールキット
Go★ 0Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Go
21At Riskhealth index
significance/swarm
Swarm: Censorship resistant storage and communication infrastructure for a truly sovereign digital society
Go★ 0Aug 10, 2026
LGPL-3.0Aug 10, 2026 · metrics 2.10.0
Go
8Criticalhealth index
sinashahoveisi/resilium
Composable resilience policies for Go — retry, circuit breaker, timeout, and rate limiting behind a single type-safe API.
Go★ 0Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Go
8Criticalhealth index
sinashahoveisi/typecfg
Type-safe Go config loader with generics, hot reload, and precise field-level errors — no reflection-heavy dependencies like viper.
Go★ 0Jul 20, 2026
MITJul 20, 2026 · metrics 2.10.0
Go
6Criticalhealth index
sirkon/msgpunsafe
Unsafe routines for msgpack decoding.
Go★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 2.10.0