Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
39,644
Monthly downloads under inspection
382B
Median health index
57 Moderate
39,644 recordsRanked by popularity · browse by tag · record statistics
Go
46At riskhealth index
hoverhuang-er/caddy-frpc
No repository description published.
Go★ 0Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
41At riskhealth index
hoverhuang-er/caddy-nacos-adapter
About nacos middleware for the Caddy server Resources
Go★ 0Jul 17, 2026
No licenseJul 17, 2026 · metrics 1.13.0
npm
46At riskhealth index
howells/ai
Unified TypeScript AI client with Vercel AI Gateway defaults, provider escape hatches, model tiers, and normalized generation options.
TypeScript★ 0↓ 2,635/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
34At riskhealth index
howells/motif
No repository description published.
TypeScript★ 0Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Go · PyPI
50Moderatehealth index
hown3d/ebpf
ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.
Go★ 0Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
30At riskhealth index
hpcc-systems/librdkafka
The Apache Kafka C/C++ library
C★ 0Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 1.13.0
Go
42At riskhealth index
hperl/codescan
Tools to generate an OAI spec from go source
Mixed★ 0↓ 0/moJul 13, 2026
Apache-2.0Jul 13, 2026 · metrics 1.13.0
Go · npm
28Criticalhealth index
hperl/oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
Go · Mustache★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
44At riskhealth index
hr3lxphr6j/coredns-ruledforward
Forwards DNS queries or returns empty (NODATA) by matching domain rules. Supports v2fly domain-list-community (dlc.dat), AdGuard Home filter rules, and inline domain-list-community-style rules.
Go · Makefile★ 0Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
npm
56Moderatehealth index
hrmuilibrary/hrm_ui_library
No repository description published.
TypeScript · SCSS★ 0↓ 4,618/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
Hex
41At riskhealth index
hrzndhrn/escape
An ANSI escape tool
Elixir★ 0↓ 5,978/moJul 17, 2026
No licenseJul 17, 2026 · metrics 1.13.0
Go
47At riskhealth index
hsanson/go-khal
Cli calendar inspired in pimutils/khal fully rewritten in Go.
Go★ 0Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
crates.io
53Moderatehealth index
hseeberger/configured
Utility to load configuration from well defined layers into any type which can be deserialized by Serde.
Rust★ 0↓ 3,516/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Go
40At riskhealth index
hsm-gustavo/mdto
A simple markdown converter that parses markdown into an AST and renders it into multiple formats (wip)
Go★ 0Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
33At riskhealth index
hudochenkov/stylelint
A mighty, modern CSS linter
JavaScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
23Criticalhealth index
hugelgupf/GoSupplyChainTests
No repository description published.
Go★ 0↓ 0/moJul 14, 2026
No licenseJul 14, 2026 · metrics 1.13.0
—
–Pendinghealth index
huggingface/diffusers
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
56Moderatehealth index
hugoh/hrd
Multi-repo manager (TUI & CLI) for git and jj with parallel dispatch and live status
Go★ 0Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
—
24Criticalhealth index
hugokessem/coreio
No repository description published.
Mixed★ 0Jul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
Go · npm
47At riskhealth index
hugolify/hugolify-theme-bootstrap
CSS and JS Bootsrap for hugolify-theme
Sass · JavaScript★ 0Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
—
–Pendinghealth index
hugpy/hugpy
No repository description published.
Mixed★ 0↓ 0/moNot scanned yet
No licenseAwaiting first inspection
Go
44At riskhealth index
hujun-open/knl
Kubenetlab, run virtual network lab topology on k8s
Go★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
—
–Pendinghealth index
hun0423/RobertCommonDriver
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
—
–Pendinghealth index
huntflow/uikit
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
—
–Pendinghealth index
huo15/claw-butler
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
56Moderatehealth index
hurricanehrndz/caddy-certstore
Provides a Caddy module for loading TLS certificates from OS-native certificate stores (macOS Keychain, Windows Certificate Store).
Go★ 0Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
50Moderatehealth index
hurricanehrndz/fanout
Repository for the coredns fanout plugin used by Network Service Mesh
Go★ 0Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0