Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,405
Monthly downloads under inspection
647B
Median health index
59 Moderate

Kind

What the repository builds — library, application, host extension. Repositories whose evidence answers nothing are listed under Unclassified.

Red flags

Findings that adjust a rating downward rather than scoring into it. Selecting several shows repositories raising any of them.

Clear filters
1,890 recordsRanked by popularity · browse by tag · record statistics
npm · crates.io
34At Riskhealth index
hanzoai/cli
The Hanzo CLI — an AI coding agent and every product of the Hanzo cloud, in one Rust binary. curl -fsSL https://hanzo.sh | sh
Rust★ 1↓ 2,572/moOct 18, 2026
Custom licenseOct 18, 2026 · metrics 2.10.0
npm · crates.io · Go
34At Riskhealth index
hanzoai/mcp
Model Context Protocol server with 260+ tools for AI agents
Rust · TypeScript★ 1↓ 875/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
25At Riskhealth index
hanzoai/research
Hanzo Research SDK (Go) — zero-config /v1/research self-logging client: structure runs as falsifiable tests (hypothesis → verdict), byte-compatible with the Python/Rust/C++ SDKs, universal open kinds
Go★ 1Sep 20, 2026
Custom licenseSep 20, 2026 · metrics 2.10.0
npm
34At Riskhealth index
hanzoai/ui
React component library for AI applications
TypeScript★ 1↓ 12.2K/moSep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
npm
6Criticalhealth index
hed-hog/cli
No repository description published.
TypeScript · EJS★ 1↓ 329/moSep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
NuGet
7Criticalhealth index
hekkaaa/NetObserver
NetObserver is an open source, cross-platform .NET Standard 2.0 library that implements a set of networking utilities. Installed as a Nuget packet.
C#★ 1Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go · npm · Packagist +1
13Criticalhealth index
holmesian/hik_ws_client
海康威视的 Web 视频流两层 WebSocket 协议
Go · Python · PHP★ 1Oct 4, 2026
No licenseOct 4, 2026 · metrics 2.10.0
—
4Criticalhealth index
hueychen27/Popcorn_Clicker
Click the popcorn.
JavaScript · CSS★ 1Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
5Criticalhealth index
hueychen27/chat_app
This is a chat app.
JavaScript · CSS★ 1Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
—
3Criticalhealth index
jdzmfg/Thinkintosh
This is a write up on how to hackintosh the Lenovo Thinkpad T440s
ASL★ 1Sep 16, 2026
UnlicenseSep 16, 2026 · metrics 2.10.0
—
2Criticalhealth index
jdzmfg/nitotv
nitotv repository
CSS · SCSS · JavaScript★ 1Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
2Criticalhealth index
k4ali/CheetoUI
[shitty goofy ahh resource dont use!](OpenSource) FiveM Typescript Menu-Library
TypeScript★ 1Sep 16, 2026
GPL-3.0Sep 16, 2026 · metrics 2.10.0
Go · Maven · npm
9Criticalhealth index
kai-zer-ru/buhgalter
Бухгалтер: Self-hosted личная бухгалтерия
Svelte · Go · TypeScript★ 1Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go · npm
9Criticalhealth index
kave-io/kave
The control plane for AI agents — observe, authorize, validate, and cost-control every agent action across any framework, model, or runtime.
Go · TypeScript★ 1Sep 15, 2026
Custom licenseSep 15, 2026 · metrics 2.10.0
Go
25At Riskhealth index
kubeops/pgoutbox
PostgreSQL WAL listener
Go★ 1Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
npm
3Criticalhealth index
l0ji/atproto-migrator
No repository description published.
TypeScript · CSS★ 1Sep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
npm
2Criticalhealth index
l0ji/bluroma
Pleroma-like client for Bluesky
TypeScript · SCSS★ 1Sep 16, 2026
AGPL-3.0Sep 16, 2026 · metrics 2.10.0
Go · crates.io · npm
34At Riskhealth index
luxfi/crypto
Core cryptographic primitives for Lux: high-performance hash functions (SHA-2/3), symmetric ciphers, ECDSA & BLS signatures, HKDF key derivation, and lattice-based post-quantum schemes.
C · Go★ 1Sep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
luxfi/evm
▼ LUX EVM: Launch your own Ethereum compatible EVM on Lux Network.
Go★ 1Sep 11, 2026
LGPL-3.0Sep 11, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
luxfi/geth
▼ Ethereum virtual machine without network/consensus, for building custom blockchain services.
Go★ 1Sep 11, 2026
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
luxfi/indexer
▼ LUX Network indexer and explorer.
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
luxfi/lattice
▼ LUX Lattice is a multiparty homomorphic encryption designed for post quantum safety.
Go★ 1Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
luxfi/netrunner
▼ LUX Network Runner tool
Go★ 1Sep 11, 2026
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
Go · npm
34At Riskhealth index
luxfi/sdk
▼ LUX Chain SDK for building high performance blockchains on Lux Network.
Go★ 1Sep 11, 2026
BSD-3-ClauseSep 11, 2026 · metrics 2.10.0
PyPI · Go
34At Riskhealth index
luxfi/zap
Zero-Allocation Protocol for high-performance AI agent communication
Go★ 1Oct 22, 2026
BSD-3-ClauseOct 22, 2026 · metrics 2.10.0
npm
12Criticalhealth index
mParticle/js-models
Monorepo for mParticle JavaScript/TypeScript Models
TypeScript★ 1↓ 146.2K/moSep 15, 2026
No licenseSep 15, 2026 · metrics 2.10.0
Go
8Criticalhealth index
mcbalaam/ebitter
a set of things for making games with ebitengine
Go★ 1Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
—
3Criticalhealth index
mche/Mojolicious-Plugin-AssetPack-Che
Child of Mojolicious::Plugin::AssetPack for little bit code.
HTML · Perl★ 1Sep 16, 2026
No licenseSep 16, 2026 · metrics 2.10.0
Go
8Criticalhealth index
meoyawn/pggen
Generate type-safe Go for any Postgres query. If Postgres can run the query, pggen can generate code for it.
Go★ 1Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
PyPI
34At Riskhealth index
modern-python/httpware
Typed, resilient HTTP clients for Python, sync and async
Python★ 1↓ 2,212/moOct 4, 2026
MITOct 4, 2026 · metrics 2.10.0