Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
83,007
Monthly downloads under inspection
632B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,540 recordsRanked by popularity · browse by tag · record statistics
Go
19Criticalhealth index
Finschia/iavl
Merkleized IAVL+ Tree implementation in Go forked from cosmos/iavl(https://github.com/cosmos/iavl)
Go★ 19Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
17Criticalhealth index
NubeDev/bacnet
No repository description published.
Go★ 19Sep 19, 2026
GPL-2.0Sep 19, 2026 · metrics 2.10.0
PyPI
10Criticalhealth index
PavanTatikonda/itypes
Basic immutable container types for Python.
Python★ 19↓ 1.2M/moSep 17, 2026
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
datafuse-extras/sqlparser-rs
Extensible SQL Lexer and Parser for Rust
Rust★ 19Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
20At Riskhealth index
datawire/teleproxy
No repository description published.
Go · Makefile★ 19Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
crates.io · PyPI
13Criticalhealth index
ekhodzitsky/polyvoice
Speaker diarization for Rust — who spoke when, on CPU, without Python. INT8 kernels (~8.4 MB, MIT, ungated). Rust, Python, C FFI, and CLI.
Rust★ 19↓ 2,550/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Packagist
24At Riskhealth index
kartik-v/yii2-widget-rangeinput
An enhanced Yii 2 widget encapsulating the HTML 5 range input (sub repo split from yii2-widgets)
PHP★ 19↓ 73.7K/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
12Criticalhealth index
node-a-team/Cosmos-IE
Integrated Exporter for CosmosSDK
Go★ 19Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
npm
23At Riskhealth index
open-draft/logger
Environment-agnostic, ESM-friendly logger for simple needs.
TypeScript★ 19↓ 72.3M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
crates.io · npm
19Criticalhealth index
paritytech/polkadot-bulletin-chain
The Bulletin Chain is a parachain providing distributed data storage and retrieval infrastructure for the Polkadot ecosystem.
Rust · TypeScript★ 19↓ 16.4K/moSep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
npm
23At Riskhealth index
rhinestonewtf/erc4337-validation
A library to validate the ERC-4337 rules within Foundry
Solidity★ 19↓ 3,398/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
PyPI
20At Riskhealth index
sdispater/pytzdata
Official timezone database for Python.
Python★ 19↓ 12.6M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
19Criticalhealth index
solarwinds/appoptics-apm-go
AppOptics APM Instrumentation for Go
Go★ 19Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
25At Riskhealth index
cappyzawa/starlark.vim
vim plugin for starlark
Vim Script★ 18Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
crates.io
37Weakhealth index
crossterm-rs/crossterm-winapi
Crossterm Windows API Abstractions
Rust★ 18↓ 7M/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
15Criticalhealth index
cyclops-ui/templates
The Official Templates Repository of Cyclops
Smarty★ 18Sep 21, 2026
No licenseSep 21, 2026 · metrics 2.10.0
29At Riskhealth index
emqxarchive/emqx-exproto
The Multiple-Language extension plugin for Protocol access
Erlang★ 18Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
20At Riskhealth index
kwp-lab/vikadata-widget-docx-generator
根据docx模板,一键批量填充字段并合成新的word文档
TypeScript★ 18Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
33At Riskhealth index
pinojs/quick-format-unescaped
Solves a problem with util.format
JavaScript★ 18Sep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm · Maven
19Criticalhealth index
vaadin/vaadin-connect
A Vaadin Labs experiment with a secure stateless communication framework
Java · TypeScript★ 18↓ 144/moSep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
30At Riskhealth index
wooorm/zwitch
Handle values based on a property
JavaScript · TypeScript★ 18↓ 178M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
10Criticalhealth index
zertosh/nullthrows
flow typed nullthrows
JavaScript★ 18↓ 60.5M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
Go
32At Riskhealth index
MindscapeHQ/raygun4go
Go SDK for Raygun
Go★ 17Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
30At Riskhealth index
bnb-chain/revm
No repository description published.
Rust★ 17Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
25At Riskhealth index
capnfabs/grouse
A diff tool for Hugo static sites.
Go★ 17Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
32At Riskhealth index
conventional-changelog/get-pkg-repo
Get repository user and project information from package.json file contents.
JavaScript★ 17↓ 11.5M/moSep 23, 2026
MITSep 23, 2026 · metrics 2.10.0
npm
19Criticalhealth index
element-hq/matrix-react-sdk
Matrix SDK for React Javascript
TypeScript★ 17↓ 27.3K/moSep 20, 2026
AGPL-3.0Sep 20, 2026 · metrics 2.10.0