Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
81,565
Monthly downloads under inspection
622B
Median health index
59 Moderate
34,155 recordsRanked by popularity · browse by tag · record statistics
Go
62Moderatehealth index
psyb0t/ctxerrors
A Go library that wraps errors with context information (file, line, function) because debugging without context is like trying to find your dick in the dark.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
54Moderatehealth index
psyb0t/goenv
The most over-engineered environment variable reader in the history of Go programming. A full-blown, battle-tested, enterprise-grade package that reads ONE environment variable and tells you if you're in prod or dev.
Go · Makefile★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
60Moderatehealth index
psyb0t/gonfiguration
Config loading with zero fluff. Because ain't nobody got time for overcomplicated crap. Unleash the gonfiguration beast!
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
62Moderatehealth index
psyb0t/gorpitx
Go wrapper for rpitx — subprocess-managed RF transmission via a singleton. Covers FM/RDS, Morse, POCSAG, FT8, SSTV, RTTY, FSK, IQ and more (12 modules). Dev-mode mocks execution so you can test without keying an actual transmitter.
Go · Yacc★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
53Moderatehealth index
psyb0t/oapixconstgen
Go tool that generates typed Go constants from the x-constants extension in OpenAPI specs, keeping spec and code in sync.
Go · Makefile★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
56Moderatehealth index
psyb0t/slogging
Everything for Go's stdlib log/slog in one place: configure it from the environment, plus handlers that ship logs to Loki or keep them searchable in memory. Spiritual successor to logrus-configurator.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
13Criticalhealth index
psyb0t/sql-migrator
No repository description published.
Go · Makefile★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
33At Riskhealth index
psyduck-etl/mysql
No repository description published.
Go★ 0Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Go
36Weakhealth index
pterbsgame-netizen/effectgate
A security proxy for MCP stdio servers: it decides on what a tool call does, not on how the text is worded.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
crates.io
67Goodhealth index
pulseengine/sigil
Sigil — Supply chain security for WebAssembly. Embedded signatures, Sigstore keyless signing, SLSA provenance. Part of the PulseEngine toolchain.
Rust★ 0Sep 17, 2026
No licenseSep 17, 2026 · metrics 2.10.0
Go
11Criticalhealth index
punchcms/punchdb
Database Layer
Go★ 0Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
28At Riskhealth index
punchh/code-push-server-go
Server that supports react-native-code-push
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go · Maven
38Weakhealth index
punkscience/earmark
CLI to encrypt and upload music to Blossom cloud storage via Nostr
Kotlin · Go★ 0Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Go
65Goodhealth index
puppetlabs/go-libs
go-libs is a set of common Go libraries
Go★ 0Sep 14, 2026
Apache-2.0Sep 14, 2026 · metrics 2.10.0
npm
42Weakhealth index
pwngh/economy-lab
A provably-solvent credits economy on one double-entry ledger.
TypeScript★ 0↓ 124/moSep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
npm
35Weakhealth index
pyronaur/oxlint-plugin-inhuman
No repository description published.
JavaScript★ 0↓ 4,054/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
10Criticalhealth index
pyvespa/vespacli
This is a PlaceHolder for Predator_97
Mixed★ 0Sep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
Packagist
67Goodhealth index
qase-tms/qase-api-client
Qase TestOps API V1 client for PHP
PHP★ 0↓ 30.4K/moSep 17, 2026
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
21At Riskhealth index
qd2ss/sfs
No repository description published.
Go★ 0Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
PyPI
53Moderatehealth index
qiboteam/qibolab-qblox
No repository description published.
Nix · Shell★ 0Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
PyPI
36Weakhealth index
qiboteam/qibolab-qm
No repository description published.
Nix · Shell★ 0Sep 15, 2026
Apache-2.0Sep 15, 2026 · metrics 2.10.0
Go
21At Riskhealth index
qingcloudhx/stream
Elegant stream processing pipeline written entirely in Golang
Go★ 0Sep 20, 2026
BSD-3-ClauseSep 20, 2026 · metrics 2.10.0
Go
19Criticalhealth index
qingfeng-studio/wxgo
No repository description published.
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
27At Riskhealth index
qist/sftp
No repository description published.
Go★ 0Sep 18, 2026
BSD-2-ClauseSep 18, 2026 · metrics 2.10.0
Go
54Moderatehealth index
qist/sqlite
No repository description published.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
42Weakhealth index
qiushiyan/envoy
Run one headless AI-session turn (claude or codex) as a supervised job and get it back as durable data
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
29At Riskhealth index
qiwentaidi/clients
Package clients provides HTTP(S) client utilities based on resty, with support for custom TLS, proxy, random User-Agent, and protocol detection.
Go★ 0Sep 14, 2026
No licenseSep 14, 2026 · metrics 2.10.0
Go
16Criticalhealth index
qj0r9j0vc2/alert-bridge
No repository description published.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0