Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
82,203
Monthly downloads under inspection
622B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
2,329 recordsRanked by popularity · browse by tag · record statistics
npm
34At Riskhealth index
octokit/plugin-request-log.js
Log all requests and request errors
TypeScript · JavaScript★ 7↓ 74.4M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
20At Riskhealth index
redhotvengeance/topl
JavaScript (Node.js and browser) meets TOML.
CoffeeScript · JavaScript★ 7↓ 34/moSep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
Go
7Criticalhealth index
sashamelentyev/interfacebloat
A linter that checks the number of methods inside an interface.
Go★ 7Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
16Criticalhealth index
thedatafoundation/story-geth
Go implementation of the Ethereum protocol
Go★ 7Sep 19, 2026
LGPL-3.0Sep 19, 2026 · metrics 2.10.0
24At Riskhealth index
vcabbage/trivialt
Go TFTP library with full standards support.
Go★ 7Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
8Criticalhealth index
SagerNet/utls
Fork of the Go standard TLS library, providing low-level access to the ClientHello for mimicry purposes.
Go★ 6Sep 20, 2026
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
crates.io
18Criticalhealth index
autonomys/substrate
Substrate: The platform for blockchain innovators
Rust★ 6Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
25At Riskhealth index
bigcommerce/data-store-js
A JavaScript library for managing application state
TypeScript★ 6↓ 8,941/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
14Criticalhealth index
cloudwavego/protoc-gen-gin
从 protobuf 文件中生成使用 gin 的 http rpc 服务 (protobuf to gin code)
Go · Smarty★ 6Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
28At Riskhealth index
difyz9/markdown2tts
一个功能完整、高性能的文本(MarkDown)转语音(TTS)应用程序,支持 双引擎、并发处理、智能过滤 等特色功能。
Go★ 6Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Maven
28At Riskhealth index
fluxninja/aperture-java
SDK to interact with Aperture Agent
Java★ 6Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
28At Riskhealth index
go-gorm/rawsql
No repository description published.
Go★ 6Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
24At Riskhealth index
libpoet/poet
The Performance with Optimal Energy Toolkit
C★ 6Sep 18, 2026
BSD-3-ClauseSep 18, 2026 · metrics 2.10.0
crates.io
9Criticalhealth index
soc/option-ext
moved to htps://codeberg/soc/option-ext
Rust★ 6↓ 20.7M/moSep 17, 2026
MPL-2.0Sep 17, 2026 · metrics 2.10.0
crates.io
35Weakhealth index
thomcc/rust-base16
Base16 (hex) encoding functions for rust
Rust★ 6↓ 871.3K/moSep 18, 2026
UnlicenseSep 18, 2026 · metrics 2.10.0
npm
28At Riskhealth index
wooorm/ccount
Count how often a substring occurs
JavaScript★ 6↓ 184M/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
14Criticalhealth index
TrilliumIT/vxrouter
A vxlan networking and ipam plugin for docker clusters.
Go★ 5Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
20At Riskhealth index
bluss/rawpointer
Extra methods for raw pointers
Rust★ 5↓ 9.3M/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
24At Riskhealth index
cedar-lang/cedar
A lisp dialect
C++★ 5Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
Go
16Criticalhealth index
frostyard/plow
debian package repository manager, 100% serverless with GH Actions and Pages
Go★ 5Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Maven
13Criticalhealth index
hsu-aut/PLC-Simulation
Simulation of a Fischer-Technik lab plant that can be used to learn PLC programming
Java★ 5Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Go
32At Riskhealth index
macabu/inamedparam
:writing_hand: A linter that reports interfaces with unnamed method parameters
Go★ 5Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
crates.io
21At Riskhealth index
ncatelli/parcel
A small zero-dependency parser-combinator library for rust.
Rust★ 5Sep 21, 2026
Apache-2.0Sep 21, 2026 · metrics 2.10.0
crates.io · npm
28At Riskhealth index
ncatelli/scrap
A minimal command-line utility framework built with zero external dependencies
Rust★ 5Sep 21, 2026
Apache-2.0Sep 21, 2026 · metrics 2.10.0
Packagist
14Criticalhealth index
pear/Structures_Graph
Graph datastructure manipulation library
PHP★ 5↓ 26.5K/moSep 19, 2026
LGPL-3.0Sep 19, 2026 · metrics 2.10.0