Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
77,916
Monthly downloads under inspection
621B
Median health index
60 Moderate
36,209 recordsRanked by popularity · browse by tag · record statistics
Go
34At Riskhealth index
paspoid/server-api-go
Api integration with services
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
42Weakhealth index
passport-next/passport-strategy
An abstract class implementing Passport's strategy API.
JavaScript★ 0↓ 94K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
33At Riskhealth index
path-warden/pyra
Pyra is an enforceable authority layer for AI coding agents. It is a single Go binary that turns the decisions, requirements, and designs your team agrees to into 'Canon', which is: typed Markdown artifacts, validated against real standards, wired into a blocking gate sysetm, and served to agents over MCP. No decision goes unrecorded
Go★ 0Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
npm
36Weakhealth index
pathscale/solid-layouts
Logic in a .ts file, markup in a .layout.tsx file, presentation declared at the call site
Rust · TypeScript · JavaScript★ 0↓ 7,192/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
26At Riskhealth index
patrickb314/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
Go
33At Riskhealth index
patrickbergner/json-really-pretty-go
JSON pretty formatter that lays out a document by the shape of the data
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
26At Riskhealth index
patrickjane/lazydodo-bot
Discord bot for the Lazy Dodo ASA cluster
Go★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
patricksimpson/izerop-cli
No repository description published.
Go★ 0Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Go
17Criticalhealth index
patrory/gokit
No repository description published.
Go★ 0Sep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
RubyGems
14Criticalhealth index
paulRbr/bump-cli
Bump.sh CLI - Deploy your OpenAPI & AsyncAPI documentations from your CI
Ruby★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
npm
45Weakhealth index
paulRbr/cli
Bump.sh CLI - Deploy your OpenAPI & AsyncAPI documentations from your CI
TypeScript★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
48Weakhealth index
paulgmiller/kage
Maintain cheked in secrets with age and deploy them to k8s
Go★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm · crates.io
75Goodhealth index
paulgsc/some-ui
suppose I manage all my ui's here.
TypeScript★ 0↓ 4,710/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
27At Riskhealth index
paulmanoni/viteless
Zero-Node, native-ESM dev server for Go web frameworks — Vite's unbundled dev architecture, reimplemented in Go.
Go★ 0Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go · npm
73Goodhealth index
pavestack/pavestack
Pavestack is an Internal Developer Platform (IDP) MVP delivered as a monorepo, featuring GitOps delivery, automated golden-path scaffolding, and security by default.
Go · TypeScript · HCL★ 0Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
25At Riskhealth index
pavlov-cx/lfscache
LFS Cache is a caching Git LFS proxy.
Go · Shell★ 0Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
npm
36Weakhealth index
pawan-rocks/tantuUI
No repository description published.
JavaScript · TypeScript · CSS★ 0↓ 198/moSep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
29At Riskhealth index
pawn-sh/go-nfs
golang NFSv3 server
Go★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
51Moderatehealth index
pawnkit/pawn-analysis
A semantic/preprocessor engine for the pawn language v3
Go★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
45Weakhealth index
pawnkit/pawn-api
SA-MP/open.mp API metadata and package API metadata
Go★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
47Weakhealth index
pawnkit/pawn-plugin-host
A way to run samp/open.mp plugins standalone without any server, useful for debugging/testing tools
Go · C★ 0Sep 14, 2026
Custom licenseSep 14, 2026 · metrics 2.10.0
Go
50Moderatehealth index
pawnkit/pawn-project
A workspace, manifests, resolution, and toolchain discovery
Go★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
Go
47Weakhealth index
pawnkit/pawndebug
Debug Adapter Protocol implementation
Go★ 0Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
48Weakhealth index
pawnkit/pawnlsp
A language server for pawn v3
Go★ 0Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
Go
47Weakhealth index
pawnkit/pawnmigrate
AST aware migrations and codemods
Go★ 0Sep 14, 2026
MITSep 14, 2026 · metrics 2.10.0
NuGet
59Moderatehealth index
payabli/sdk-csharp
Payabli's official server SDK for C#
C#★ 0Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0