Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,845
Monthly downloads under inspection
649B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
8,436 recordsRanked by popularity · browse by tag · record statistics
Go
29At Riskhealth index
mislav/cli
GitHub’s official command line tool
Go★ 1Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
—
21At Riskhealth index
monzo/pushgateway
push acceptor for ephemeral and batch jobs
Go★ 1Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0
Go
14Criticalhealth index
moul/httpexpect
End-to-end HTTP and REST API testing for Go.
Go★ 1Sep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Go
21At Riskhealth index
mrparkers/external-dns-target-admission
Automatically add the ExternalDNS "target" annotation to Kubernetes Ingresses and Istio Gateways
Go★ 1Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
msclock/cppcheck-wheel
Package cppcheck as a python wheel.
CMake · Python★ 1↓ 40.5K/moSep 24, 2026
Apache-2.0Sep 24, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
namada-net/indexmap
A hash table with consistent order and fast iteration; access items by key or sequence index
Rust★ 1Oct 12, 2026
Custom licenseOct 12, 2026 · metrics 2.10.0
—
41Weakhealth index
ndeloof/docker
Docker - the open-source application container engine
Go★ 1Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
near/paperclip
WIP OpenAPI tooling for Rust.
Rust★ 1Sep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
8Criticalhealth index
neo-ngd/netmap
REPL for interacting with netmap in NEOFS and applying placement rules to it
Go★ 1Sep 18, 2026
GPL-3.0Sep 18, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
nervosnetwork/jsonrpc
Rust JSON-RPC implementation
Rust★ 1Sep 25, 2026
MITSep 25, 2026 · metrics 2.10.0
Go
22At Riskhealth index
newcore-network/go-stdlib
Newcore Standard Libraries (Go)
Go★ 1Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Packagist
35Weakhealth index
nicolas-grekas/doctrine-orm
Doctrine Object Relational Mapper (ORM)
PHP★ 1Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
—
14Criticalhealth index
nicpottier/html5-boilerplate
starting html/css template. so much goodness baked in by default
PHP · JavaScript★ 1Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
npm
15Criticalhealth index
niksy/karma-ievms
Karma launcher for ievms virtual machines
JavaScript · CoffeeScript★ 1Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
25At Riskhealth index
nimeshkb/GOLang
No repository description published.
Go · C++ · Python★ 1Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Maven
19Criticalhealth index
nl-portal/nl-portal-backend-libraries
NL-Portal is a service developed for interaction with external parties, such as residents, customers, suppliers or partner organisations. NL-Portal runs as a stand-alone service - typically communicating requests to one or more case management solutions in a back office. Target group is Dutch government organizations.
Kotlin★ 1Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
crates.io
17Criticalhealth index
noahlemen/wasm-pack
📦✨ pack up the wasm and publish it to npm!
Rust★ 1Oct 8, 2026
Apache-2.0Oct 8, 2026 · metrics 2.10.0
—
12Criticalhealth index
noir-lang/ec
No repository description published.
Noir★ 1Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
19Criticalhealth index
noshiro-pf/ts-codemod-lib
Codemod tools collection for TypeScript
TypeScript★ 1Sep 11, 2026
Apache-2.0Sep 11, 2026 · metrics 2.10.0
—
23At Riskhealth index
nwf/snmalloc
Message passing based allocator
C++★ 1Oct 20, 2026
MITOct 20, 2026 · metrics 2.10.0
npm
14Criticalhealth index
nxtedition/xuid
No repository description published.
JavaScript★ 1↓ 3,982/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
14Criticalhealth index
o1egl/go-enum
An enum generator for go
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
26At Riskhealth index
occlum/incubator-teaclave-sgx-sdk
Rust SGX SDK provides the ability to write Intel SGX applications in Rust Programming Language.
Rust · C★ 1Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Packagist
21At Riskhealth index
ondrejmirtes/orm
Orm with clean object design, smart relationship loading and powerful collections.
PHP★ 1Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
crates.io
14Criticalhealth index
openebs/h2
HTTP 2.0 client & server implementation for Rust.
Rust★ 1Oct 16, 2026
MITOct 16, 2026 · metrics 2.10.0
Go
13Criticalhealth index
openrm/gofpdf
A PDF document generator with high level support for text, drawing and images
Go★ 1Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
—
28At Riskhealth index
oreiche/justbuild
just, a generic build tool
C++ · Shell★ 1Oct 23, 2026
Apache-2.0Oct 23, 2026 · metrics 2.10.0