Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
40,126
Monthly downloads under inspection
382B
Median health index
57 Moderate
40,126 recordsRanked by popularity · browse by tag · record statistics
Go
32At riskhealth index
fnune/test-provider-green
Test public repo for Pulumi community registry pipeline sandbox
Go · Shell★ 0Jul 18, 2026
No licenseJul 18, 2026 · metrics 1.13.0
—
30At riskhealth index
fnune/test-provider-plugin-broken
Test public repo for Pulumi community registry pipeline sandbox
Mixed★ 0Jul 18, 2026
No licenseJul 18, 2026 · metrics 1.13.0
npm
41At riskhealth index
fomantic/gulp-concat-css
Concatenates css files, bubbling up import statements (as per the standard), and optionally rebasing urls and inlining local import statements.
JavaScript · CSS★ 0↓ 29.3K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
37At riskhealth index
fomantic/gulp-concat-filenames
A simple gulp plugin to take a list of files, and rather than concatenating their contents into a singular file, you concat their file names into a file, with, template, prefix and suffix options
JavaScript★ 0↓ 27.8K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
46At riskhealth index
fomantic/gulp-header
Gulp extension to add a header to file(s) in the pipeline
JavaScript★ 0↓ 24.3K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
29Criticalhealth index
fomantic/rework
Plugin framework for CSS preprocessing in Node.js
JavaScript★ 0↓ 29.4K/moJul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
npm
44At riskhealth index
fomantic/rework-import
A rework plugin to read and inline css via @import
JavaScript★ 0↓ 31.5K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm · PyPI · Go +2
60Moderatehealth index
foo-ogawa/litedbmodel
A lightweight, SQL-friendly TypeScript ORM for PostgreSQL, MySQL, and SQLite with transparent N+1 prevention and type-safe queries
TypeScript★ 0↓ 2,199/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
npm · Go
31At riskhealth index
fookiejs/cloud
No repository description published.
TypeScript★ 0↓ 225/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
53Moderatehealth index
forestl18/mihomo
A simple Python Pydantic model for Honkai: Star Rail parsed data from the Mihomo API.
Go★ 0↓ 0/moJul 14, 2026
GPL-3.0Jul 14, 2026 · metrics 1.13.0
—
–Pendinghealth index
forgecharts/ForgeCharts
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
64Moderatehealth index
forgesworn/bray
Trust-aware Nostr MCP server for AI agents and humans. Verification, proximity, and access woven into every interaction.
TypeScript★ 0↓ 3,108/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
—
–Pendinghealth index
forgexa/forgexa
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
61Moderatehealth index
formalco/pulumi-formal
Pulumi Provider for Formal
Makefile · Shell · Go★ 0Jul 19, 2026
MPL-2.0Jul 19, 2026 · metrics 1.13.0
—
–Pendinghealth index
formbench/erpnext-queue
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
—
–Pendinghealth index
formigio/fazemos-cli
No repository description published.
Mixed★ 0↓ 0/moNot scanned yet
No licenseAwaiting first inspection
Go · crates.io
49At riskhealth index
fornevercollective/grokytalky
walkie talk / hex video / MIDI, built with [Charm Bubble Tea v2](https://github.com/charmbracelet/bubbletea) + Lip Gloss
Go · JavaScript★ 0Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
npm
59Moderatehealth index
forthix/forthic-ts
TypeScript runtime for Forthic
TypeScript★ 0↓ 9,654/moJul 15, 2026
BSD-2-ClauseJul 15, 2026 · metrics 1.13.0
Go
40At riskhealth index
foundrydb/foundrydb-sdk-go
Go SDK for FoundryDB managed database platform
Go★ 0Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
—
–Pendinghealth index
foxford/ui
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Maven
29Criticalhealth index
fracpete/central-portal-parent
Parent POM for Maven Central Portal equivalent to OSSRH oss-parent POM
Mixed★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
—
–Pendinghealth index
fractal-works/auto
No repository description published.
Mixed★ 0↓ 0/moNot scanned yet
No licenseAwaiting first inspection
—
–Pendinghealth index
frame-kit/packages
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
38At riskhealth index
franc-zar/go-ima
Go library for attesting Linux IMA measurement lists
Go★ 0Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
npm
40At riskhealth index
francescovallone/magpie
No repository description published.
TypeScript★ 0↓ 2,176/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
—
20Criticalhealth index
franciscocpg/retool
Vendoring for executables written in Go
Go★ 0↓ 0/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
—
–Pendinghealth index
franky-agent/dunebot
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection