Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,050
Monthly downloads under inspection
386B
Median health index
57 Moderate
44,050 recordsRanked by popularity · browse by tag · record statistics
npm
46At riskhealth index
dclimate/jaxray
A javascript implementation similar to xarray
TypeScript★ 1↓ 1,014/moJul 14, 2026
No licenseJul 14, 2026 · metrics 1.13.0
Go
59Moderatehealth index
deadpoets/secmem
Pure-Go off-heap secret memory: mmap/mlock, memfd_secret L4 isolation, guard pages, fail-closed by default
Go★ 1Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
—
41At riskhealth index
deatil/zpem
A pem parse and encode library for Zig.
Zig★ 1Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
36At riskhealth index
decadestory/goutil
golang customize library
Go★ 1Jul 17, 2026
No licenseJul 17, 2026 · metrics 1.13.0
npm
67Moderatehealth index
decentraland/hammurabi-headless
BabylonJS Authorative Server for SDK7 Scenes
TypeScript★ 1↓ 2,859/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Go
31At riskhealth index
deckhouse/csi-ceph
No repository description published.
Go★ 1Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
crates.io
51Moderatehealth index
defGuard/boringtun
Userspace WireGuard® Implementation in Rust
Rust★ 1↓ 12.6K/moJul 17, 2026
BSD-3-ClauseJul 17, 2026 · metrics 1.13.0
Hex
39At riskhealth index
demerphq/assign_when
Elixir macro to avoid duplicated code when conditionally updating a variable by allowing when on assignment statements
Elixir★ 1↓ 2,461/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
48At riskhealth index
demula/mono
Update all go.mod and go.sum files of a mono-repo to the given tagged release.
Go★ 1Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
Packagist
60Moderatehealth index
dereuromark/cakephp-ide-helper-extra
IdeHelper task and addon collection
PHP · SCSS · Less★ 1↓ 3,516/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go · npm
50Moderatehealth index
desarso/gonvex
Convex-inspired realtime backend: Go runtime, TypeScript CLI, generated bindings, React hooks, Postgres, and WebSockets
Go · TypeScript★ 1Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Packagist
55Moderatehealth index
detain/phlix-shared
Shared interfaces, DTOs, event names, and protocol types used by both phlix-server and phlix-hub. Composer-installable, PHP 8.3+, zero I/O.
PHP★ 1↓ 2,063/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go · npm
64Moderatehealth index
dever-labs/mockly
Cross-platform multi-protocol mock server — HTTP, WebSocket, gRPC, GraphQL, TCP, Redis, SMTP, MQTT — with a web UI, scenario system, and fault injection.
Go · Java★ 1Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm
55Moderatehealth index
devforth/adminforth-agent
No repository description published.
TypeScript · Vue★ 1↓ 6,803/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
61Moderatehealth index
devr-tools/codeguard
devr's codeguard tool for ci, testing and deployment
Go★ 1Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
crates.io
58Moderatehealth index
dfinity/ic-bn-lib
Internet Computer Boundary Nodes shared modules
Rust★ 1↓ 3,496/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Hex
36At riskhealth index
dgilperez/credo_exception_swallow
Credo check to catch and avoid unwanted exception silent swallows in Elixir code
Elixir★ 1↓ 8,068/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Maven
49At riskhealth index
dgp-eu/tools
Java modular project with super useful classes to be used where necessary (based on latest Java GA version)
Java★ 1Jul 24, 2026
EPL-2.0Jul 24, 2026 · metrics 1.13.0
Go
53Moderatehealth index
dgraph-io/dgdao-telemetry
OpenTelemetry instrumentation for Dgraph clients (dgraph-io/dgdao); formerly mlwelles/modusGraph-telemetry
Go★ 1Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
22Criticalhealth index
dgsb/gotags
ctags-compatible tag generator for Go
Go★ 1Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Go
54Moderatehealth index
dhose/go-turfgame-exporter
No repository description published.
Go★ 1Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Packagist
51Moderatehealth index
diablomedia/zf1-validate
Validate Component from ZF1
PHP★ 1↓ 5,028/moJul 14, 2026
BSD-3-ClauseJul 14, 2026 · metrics 1.13.0
Go
62Moderatehealth index
diadata-org/lumina-library
Library support for diadata decentral feeders.
Go★ 1Jul 19, 2026
AGPL-3.0Jul 19, 2026 · metrics 1.13.0
Go
36At riskhealth index
diagnosis/go-toolkit
No repository description published.
Go★ 1Jul 18, 2026
No licenseJul 18, 2026 · metrics 1.13.0
npm
57Moderatehealth index
diagrammo/dgmo-mcp
Render 32 diagram and chart types to SVG/PNG with browser preview and HTML reports.
TypeScript · JavaScript★ 1↓ 3,750/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
49At riskhealth index
diamondburned/go-butterflymx
ButterflyMX client in Go (reverse engineered).
Go★ 1Jul 22, 2026
GPL-3.0Jul 22, 2026 · metrics 1.13.0