Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
39,300
Monthly downloads under inspection
382B
Median health index
57 Moderate
39,300 recordsRanked by popularity · browse by tag · record statistics
npm · Maven
53Moderatehealth index
keyneom/sync-kit
No repository description published.
TypeScript · Kotlin★ 0↓ 2,666/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
crates.io · npm
42At riskhealth index
keystone-db/keystonedb
Single-file, embedded, DynamoDB-style database written in Rust
Rust★ 0↓ 47/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
Go
47At riskhealth index
kfet/harb
Self-hosted RSS server. Plain-text storage, Google-Reader-compatible API, embedded htmx web UI. Single Go binary.
Go★ 0Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Go
43At riskhealth index
kfet/harborrs
Self-hosted RSS server. Plain-text storage, Google-Reader-compatible API, embedded htmx web UI. Single Go binary.
Go★ 0Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go
48At riskhealth index
kfet/poe-acp
HTTP relay between Poe server bots and ACP-speaking agents
Go★ 0Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go · npm
48At riskhealth index
kforbus3/Fleet-Terminal
Browser-only privileged access management (PAM) for Linux fleets — SSH through a jump host with ephemeral SSH certificates, session recording, and tamper-evident audit.
Go · TypeScript · HTML★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
45At riskhealth index
kgruel/subtask
Claude Skill to do your tasks with subagents in Git worktrees
Go★ 0Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
36At riskhealth index
khan-lau/kmq-utils
多种mq client的golang封装
Go★ 0Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Go · npm · PyPI
46At riskhealth index
khanglvm/agentfmt
Adaptive JSON-to-agent terminal output with exact token-aware format selection
Go★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
48At riskhealth index
khanglvm/online
Online web discovery CLI for AI agents
Go★ 0Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
npm · Maven
58Moderatehealth index
khipu/design-system
No repository description published.
TypeScript · HTML · CSS★ 0↓ 11.5K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
PyPI
64Moderatehealth index
khuisman/mcp-gee-sweet
Comprehensive mcp interface for Google Workspace APIs
Python★ 0Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go
54Moderatehealth index
khumbal/dnsmadeeasy-webhook
DNS Made Easy Webhook for Cert Manager
Go · Makefile★ 0Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Pendinghealth index
kianmeng/heatmap_cli
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
64Moderatehealth index
kibologic/swiss-lib
SwissJS Framework Core Libraries
TypeScript★ 0↓ 4,584/moJul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
Go
8Criticalhealth index
kibsoft/Xray-core
Xray, Penetrates Everything. Also the best v2ray-core. Where the magic happens. An open platform for various uses.
Go★ 0Jul 20, 2026
MPL-2.0Jul 20, 2026 · metrics 1.13.0
Go
47At riskhealth index
kidoz/go-vulners
Go client library for the Vulners vulnerability database API — search, audit, SBOM, VScanner, and more
Go★ 0↓ 0/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
npm
59Moderatehealth index
kieranmansfield/nuxt-layers
No repository description published.
Vue · TypeScript · HTML★ 0↓ 2,182/moJul 17, 2026
No licenseJul 17, 2026 · metrics 1.13.0
crates.io
51Moderatehealth index
kimlindholm/lockboxer
Configurable fork of Lockbox encryption library
Rust★ 0↓ 2,078/moJul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
Pendinghealth index
kindly-ai/kindly-chat
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
43At riskhealth index
kion/mbgen
Static micro-blog site generator
Go · JavaScript★ 0Jul 17, 2026
AGPL-3.0Jul 17, 2026 · metrics 1.13.0
Go
45At riskhealth index
kirill-scherba/keyvalembd
No repository description published.
Go★ 0Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
Go
46At riskhealth index
kirill-scherba/opencode-client
Go client library for opencode-serve HTTP API
Go★ 0Jul 21, 2026
BSD-3-ClauseJul 21, 2026 · metrics 1.13.0
Go
45At riskhealth index
kirinyoku/enkanetwork-go
EnkaNetwork API Go Wrapper (Supports GI, HSR and ZZZ)
Go★ 0Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go
45At riskhealth index
kirinyoku/nym
A simple and BLAZINGLY FAST CLI tool to rename files with generic names to a unique, timestamped, and content-hashed format.
Go★ 0Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI
56Moderatehealth index
kirisaki77/response-bandwidth-limiter
A response bandwidth limiting middleware for FastAPI and Starlette. It allows you to limit the response sending speed for specific endpoints.
Python★ 0↓ 28/moJul 18, 2026
MPL-2.0Jul 18, 2026 · metrics 1.13.0
Pendinghealth index
kiry163/aho-corasick
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
37At riskhealth index
kiry163/ahocorasick
No repository description published.
Go★ 0Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0