Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
70,399
Monthly downloads under inspection
592B
Median health index
60 Moderate
70,399 recordsRanked by popularity · browse by tag · record statistics
25At Riskhealth index
compilr-dev/agents
Lightweight multi-LLM agent library for CLI applications. npm install @compilr-dev/agents
Mixed★ 0Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
Pendinghealth index
compilr-dev/sdk
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Packagist
35Weakhealth index
componenta/clock
No repository description published.
PHP★ 0↓ 2,660/moAug 16, 2026
No licenseAug 16, 2026 · metrics 2.10.0
Packagist
30At Riskhealth index
componenta/config
No repository description published.
PHP★ 0↓ 2,498/moAug 15, 2026
No licenseAug 15, 2026 · metrics 2.10.0
Packagist
53Moderatehealth index
componenta/di
PSR-11 compatible dependency injection container for PHP 8.4+ with autowiring, lazy objects, and attribute-based configuration
PHP★ 0↓ 2,151/moAug 17, 2026
No licenseAug 17, 2026 · metrics 2.10.0
Packagist
35Weakhealth index
componenta/mimetype-detector
No repository description published.
PHP★ 0↓ 2,684/moAug 16, 2026
No licenseAug 16, 2026 · metrics 2.10.0
Pendinghealth index
componenta/reflection
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Packagist
29At Riskhealth index
componenta/validation
No repository description published.
PHP★ 0↓ 2,503/moAug 16, 2026
No licenseAug 16, 2026 · metrics 2.10.0
Packagist
39Weakhealth index
componenta/var-export
No repository description published.
PHP★ 0↓ 7,033/moAug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
npm
25At Riskhealth index
compose-market/core
No repository description published.
TypeScript★ 0↓ 2,118/moJul 14, 2026
MITJul 14, 2026 · metrics 2.10.0
npm · crates.io
34At Riskhealth index
compose-market/sdk
No repository description published.
TypeScript★ 0↓ 1,662/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Pendinghealth index
compose-market/theme
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
33At Riskhealth index
compozy/agh-web-assets
Generated AGH web assets embedded by the Go CLI
Go★ 0Aug 22, 2026
No licenseAug 22, 2026 · metrics 2.10.0
npm
63Moderatehealth index
compute-finance/mcp
No repository description published.
TypeScript★ 0↓ 573/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Go
25At Riskhealth index
computeflux-xyz/base-go
Our Golang boilerplates
Go★ 0Sep 13, 2026
No licenseSep 13, 2026 · metrics 2.10.0
Go
30At Riskhealth index
concernedmate/simple-stdio-plugin
simple plugin system utilizing os pipes to communicate between plugin binary and host binary
Go★ 0Sep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
npm
54Moderatehealth index
concord-consortium/token-service
No repository description published.
TypeScript★ 0↓ 2,716/moAug 3, 2026
MITAug 3, 2026 · metrics 2.10.0
Go
42Weakhealth index
concord-dev/concord
Compliance As Code
Go★ 0Sep 10, 2026
Custom licenseSep 10, 2026 · metrics 2.10.0
Go
38Weakhealth index
concourse/houdini
a no-op Garden backend
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
Pendinghealth index
configcat/rust-sdk
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
36Weakhealth index
configcrate/codex-session-doctor
Read-only health check for oversized and malformed local Codex Desktop sessions.
Go · Python★ 0Sep 15, 2026
MITSep 15, 2026 · metrics 2.10.0
Go · PyPI
77Goodhealth index
confiify/confii-go
Confii — A type-safe configuration management library for Go. Load, merge, validate, and access config from YAML, JSON, TOML, env vars, and cloud stores. Secret resolution, drift detection, versioning, and a 10-command CLI — all in one package.
Go★ 0Aug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Pendinghealth index
confluentinc/librdkafka
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Pendinghealth index
connectrpc/connect-query-es
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
30At Riskhealth index
conniehnguyen/camelmind
No repository description published.
TypeScript★ 0Jul 15, 2026
MITJul 15, 2026 · metrics 2.10.0
crates.io
42Weakhealth index
conradkleinespel/rtoolbox
No repository description published.
Rust★ 0↓ 2.4M/moAug 29, 2026
Apache-2.0Aug 29, 2026 · metrics 2.10.0