Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
42,549
Monthly downloads under inspection
384B
Median health index
57 Moderate
42,549 recordsRanked by popularity · browse by tag · record statistics
—
–Pendinghealth index
CoCreate-app/CoCreate-utils
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
40At riskhealth index
CodeEzard/Argus
Argus is a CLI-based SRE co-pilot and infrastructure monitor built in Go. It monitors infrastructure combining statistical Z-score anomaly detection and local LLM diagnostics.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
—
–Pendinghealth index
CodebuffAI/freebuff-private
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
—
–Pendinghealth index
Codexcite/Codexcite.Library
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
PyPI
61Moderatehealth index
CognitiveThoughtEngine/constitutional-agent-governance
The WHY layer for AI agents: six constitutional gates + 12 hard constraints, plus cross-session risk composition — catches agents that pass every individual gate but accumulate risk across a sequence (stateless engines can't). pip install constitutional-agent
Python★ 0↓ 331/moJul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
46At riskhealth index
ColeSpringer/WaxLabel
Audio metadata library and CLI for tags, cover art, and linting in GO.
Go★ 0Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Hex · npm
26Criticalhealth index
ColoredCow/glific
The Main application that provides the core interface via the glific APIs
Elixir★ 0Jul 26, 2026
AGPL-3.0Jul 26, 2026 · metrics 1.13.0
npm
29Criticalhealth index
ColoredCow/glific-frontend
Frontend for the Glific platform
TypeScript★ 0Jul 26, 2026
AGPL-3.0Jul 26, 2026 · metrics 1.13.0
npm
56Moderatehealth index
Colveor/devkit
Shared development toolkit for the Colveor ecosystem.
JavaScript★ 0↓ 2,871/moJul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
48At riskhealth index
CompassLabs/cli
No repository description published.
Go★ 0Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
—
–Pendinghealth index
CompassLabs/mono
No repository description published.
Mixed★ 0↓ 0/moNot scanned yet
No licenseAwaiting first inspection
—
–Pendinghealth index
ComposioHQ/composio-base-ts
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
55Moderatehealth index
Conalh/tofulock
Lock & verify Terraform/OpenTofu module sources by commit digest - the integrity providers get from the native lockfile, but modules don't.
Go★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
—
–Pendinghealth index
CondeNast/commerce-core
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
25Criticalhealth index
ConductionNL/nextcloud-vue
Shared Vue component library for Conduction Nextcloud apps — complements @nextcloud/vue with higher-level components, OpenRegister integration, and NL Design System support
Vue★ 0↓ 9,664/moJul 13, 2026
No licenseJul 13, 2026 · metrics 1.13.0
Go
63Moderatehealth index
ConductorOne/baton-asana
No repository description published.
Go★ 0Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
60Moderatehealth index
ConductorOne/baton-bamboohr
No repository description published.
Go★ 0Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Go
54Moderatehealth index
ConductorOne/baton-calendly
No repository description published.
Go★ 0Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
62Moderatehealth index
ConductorOne/baton-cloudflare
No repository description published.
Go★ 0Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
57Moderatehealth index
ConductorOne/baton-expensify
No repository description published.
Go★ 0Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
57Moderatehealth index
ConductorOne/baton-freshbooks
No repository description published.
Go★ 0Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
61Moderatehealth index
ConductorOne/baton-gitlab
No repository description published.
Go★ 0Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0