Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,157
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,909 recordsRanked by popularity · browse by tag · record statistics
Go
11Criticalhealth index
hashicorp/terraform-provider-fastly
This has moved to https://github.com/fastly/terraform-provider-fastly
Go★ 0Sep 20, 2026
MPL-2.0Sep 20, 2026 · metrics 2.10.0
Go
17Criticalhealth index
hendraismanto/rel
:gem: Modern Database Access Layer for Golang - Testable, Extendable and Crafted Into a Clean and Elegant API
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
24At Riskhealth index
hermanschaaf/cq-provider-terraform
CloudQuery Provider for Terraform state files
Go · Makefile★ 0Sep 19, 2026
MPL-2.0Sep 19, 2026 · metrics 2.10.0
Go
13Criticalhealth index
hhrutter/pkcs7
Implements a subset of PKCS#7/Cryptographic Message Syntax (rfc2315, rfc5652)
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
hj3938/gron
Make JSON greppable!
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
15Criticalhealth index
hkshaw1990/zipkin-go-opentracing
OpenTracing Tracer implementation for Zipkin in Go
Go · Thrift★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Packagist
17Criticalhealth index
hkvstore/PHPThumb
No repository description published.
PHP★ 0↓ 780/moSep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
16Criticalhealth index
holyjak/gor
HTTP traffic replay in real-time. Replay traffic from production to staging and dev environments.
Go★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go · npm
7Criticalhealth index
hpe-container-platform-community/kubedirector
Kubernetes Director (aka KubeDirector) for deploying and managing stateful applications on Kubernetes
Go★ 0Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
13Criticalhealth index
hs2973/yellowstone-vixen
Solana program parsing toolkit
Rust★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
15Criticalhealth index
huacnlee/parse
Go parsers for web formats
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
hyperf/service-governance-nacos
[READ ONLY] A nacos adapter for Hyperf service governance component.
PHP★ 0↓ 4,679/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
15Criticalhealth index
i110/h2spec
A conformance testing tool for HTTP/2 implementation.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
14Criticalhealth index
i18n-hoon/hangulize
Hangulize transcribes non-Korean words into Hangul
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
20At Riskhealth index
ianlopshire/goth
Package goth provides a simple, clean, and idiomatic way to write authentication packages for Go web applications.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
14Criticalhealth index
iansmith/vugu
Vugu: A modern UI library for Go+WebAssembly (experimental)
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
14Criticalhealth index
ipdk-io/stratum-deps
Stratum dependencies for P4 Control Plane
CMake · Shell · Python★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
PyPI · npm
34At Riskhealth index
iplweb/djangoql-iplweb
Advanced search language for Django
Python★ 0↓ 399/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
6Criticalhealth index
istoliarov/go-backpressure
Unified Go backpressure library for adaptive load shedding, failure-aware throttling, and graceful overload protection.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
NuGet
10Criticalhealth index
itmo-is-dev/editorconfig
No repository description published.
C#★ 0Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Go
22At Riskhealth index
itscaro/youtube
Download Youtube Video in Golang
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
20At Riskhealth index
ivar1309/handradi
Simple http based file server
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
17Criticalhealth index
jackzhangsir/gorose
GoRose(go orm), a mini database ORM for golang, which inspired by the famous php framwork laravle's eloquent. It will be friendly for php developer and python or ruby developer. Currently provides six major database drivers: mysql,sqlite3,postgres,oracle,mssql, Clickhouse.
Go★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
17Criticalhealth index
jacobishao/pid
No repository description published.
Go · Assembly★ 0Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
20At Riskhealth index
jacoblai/client
go package for communicating with a MQTT broker
Go★ 0Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
14Criticalhealth index
jacoblai/tools
go package for building MQTT components
Go★ 0Sep 16, 2026
Apache-2.0Sep 16, 2026 · metrics 2.10.0
15Criticalhealth index
jamietsao/beeline-go
Easy instrumentation for golang apps with Honeycomb
Go★ 0Sep 22, 2026
Apache-2.0Sep 22, 2026 · metrics 2.10.0
Go
15Criticalhealth index
jba/licensecheck
The licensecheck package classifies license files and heuristically determines how well they correspond to known open source licenses.
Go★ 0Sep 19, 2026
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0