Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
71,237
Monthly downloads under inspection
615B
Median health index
60 Moderate
71,237 recordsRanked by popularity · browse by tag · record statistics
npm
65Goodhealth index
Iterable/api-client
TypeScript client for the Iterable API
TypeScript★ 0↓ 11.5K/moAug 30, 2026
MITAug 30, 2026 · metrics 2.10.0
Pendinghealth index
Itilite/universal-ui
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
57Moderatehealth index
ItsJennyFiggy/plane-mcp
Token-efficient, agent-scoped Go MCP server for self-hosted Plane
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go · npm
45Weakhealth index
ItzEmoji/aeroflare-test
No repository description published.
Go★ 0Sep 5, 2026
GPL-3.0Sep 5, 2026 · metrics 2.10.0
npm
45Weakhealth index
Ivan-Pasco/clean-node-server
Clean Language Framework (Frame) for Node.js Server
TypeScript★ 0↓ 233/moSep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
npm
41Weakhealth index
IvanMurzak/AI-Game-Dev-CLI-Core
Shared TypeScript CLI core for the AI Game Dev engine CLIs (Unity/Unreal/Godot) — npm package @baizor/gamedev-cli-core, published via npm Trusted Publishing (OIDC).
TypeScript★ 0↓ 7,144/moAug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Pendinghealth index
Ivy-Interactive/Ivy
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
12Criticalhealth index
Iwillsky/RoseTTAFold
This package contains deep learning models and related scripts for RoseTTAFold
Python★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
41Weakhealth index
J-Siu/gh-events
List Github api `users/<USER>/received_events` output.
Go★ 0Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
Go
35Weakhealth index
J-Siu/go-crypto
module and command line for crypto function: anonymous box seal.
Go★ 0Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
Go
34At Riskhealth index
J-Siu/go-dtquery
module and command line tool to get devtools version and tab information.
Go★ 0Sep 2, 2026
MITSep 2, 2026 · metrics 2.10.0
Go
34At Riskhealth index
J-Siu/go-md2table
Transform markdown file with single line/list sections into markdown table.
Go★ 0Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go
36Weakhealth index
J-Siu/yt-toolbox
command line tool to extract youtube subscriptions, playlist and history.
Go★ 0Jul 30, 2026
MITJul 30, 2026 · metrics 2.10.0
Packagist
33At Riskhealth index
JC5/google2fa-laravel
A One Time Password Authentication package, compatible with Google Authenticator for Laravel
PHP★ 0↓ 2,425/moSep 7, 2026
MITSep 7, 2026 · metrics 2.10.0
Pendinghealth index
JHPrk/trading-mcp
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
67Goodhealth index
JLugagne/egauth
Composable, non-opinionated authentication toolkit for Go — import the modules you need (identity, tokens/JWT, sessions, passkeys, OAuth/OIDC, MFA, OTP) and wire them with DI. Secure-by-default, no framework.
Go★ 0Sep 16, 2026
MITSep 16, 2026 · metrics 2.10.0
PyPI
67Goodhealth index
JSS95/gpytorch-qr
Gaussian process quantile regression using GPyTorch
Python★ 0Aug 8, 2026
MITAug 8, 2026 · metrics 2.10.0
Go
54Moderatehealth index
JVBotelho/sso-forge
Cross-platform tool to forge Kerberos tickets with the AZUREADSSOACC key and obtain Entra ID tokens via Seamless SSO WS-Trust.
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm · Packagist
42Weakhealth index
JX3BOX/jx3box-editor
💠Article, Editor, Upload components.
JavaScript★ 0↓ 1,221/moSep 5, 2026
No licenseSep 5, 2026 · metrics 2.10.0
npm
56Moderatehealth index
JX3BOX/jx3box-ui
💠Common components,header,footer,comment,etc.
Vue · JavaScript★ 0↓ 2,282/moSep 8, 2026
No licenseSep 8, 2026 · metrics 2.10.0
npm
19Criticalhealth index
JackAtlas/cck-ui
Another Vue 3 components library.
TypeScript · Vue★ 0↓ 39/moSep 11, 2026
ISCSep 11, 2026 · metrics 2.10.0
Pendinghealth index
JackKXCO/kxco-pq-attest
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
57Moderatehealth index
JacksonWeber/opentelemetry-js
OpenTelemetry JavaScript Client
TypeScript★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
npm
17Criticalhealth index
Jaguard/nmr
Delete/remove Node.js 'node_modules' on Windows using 'subst' to avoid 'The file name is to long' error
Shell★ 0↓ 19/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
Pendinghealth index
Jahanzeb-git/codepilot
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
83Excellenthealth index
Jahia/javascript-components
The goal of this module is to provide multiple javascript packages that can be reused in different javascript applications.
JavaScript · TypeScript★ 0↓ 18.2K/moSep 15, 2026
MITSep 15, 2026 · metrics 2.10.0