Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,509
Monthly downloads under inspection
592B
Median health index
60 Moderate
67,509 recordsRanked by popularity · browse by tag · record statistics
Go · npm
65Goodhealth index
gethinode/mod-hanko
A Hugo module to add authentication powered by Hanko to your Hinode site
JavaScript · HTML · SCSS★ 0Sep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
npm · Go
65Goodhealth index
gethinode/mod-hubspot
A Hugo module to add Hubspot to your Hinode site (work in progress)
HTML · JavaScript★ 0↓ 64/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
npm · Go
60Moderatehealth index
gethinode/mod-katex
A Hugo module to add KaTeX formulas to your Hinode site
HTML · JavaScript★ 0↓ 42/moSep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
npm · Go
69Goodhealth index
gethinode/mod-utils
A Hugo module with common utilities for your Hinode site
HTML★ 0↓ 363/moSep 5, 2026
MITSep 5, 2026 · metrics 2.10.0
Go
33At Riskhealth index
getinbio/inbio-go
Official Go SDK for INBIO (in.bio) — URL shortener, QR codes, click analytics. Zero dependencies, free keyless endpoints.
Go★ 0Aug 18, 2026
MITAug 18, 2026 · metrics 2.10.0
Go
47Weakhealth index
getjv/tbox
My personal curated Go tools
Go★ 0Jul 17, 2026
MITJul 17, 2026 · metrics 2.10.0
Packagist
62Moderatehealth index
getmilpa/agent
Long-running coding sessions for the Milpa PHP framework: an event-sourced session that survives the process, so an agent can be paused, resumed, audited and stopped.
PHP★ 0↓ 2,468/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/ai-gateway
Dual-provider LLM gateway (OpenAI + Anthropic) with an agentic tool-use loop over milpa/tool-runtime. Apache-2.0.
PHP★ 0↓ 2,195/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist
60Moderatehealth index
getmilpa/auth
milpa/auth — the identity producer: Credential to Actor/AuthContext, PSR-15 middlewares, fail-closed scopes. Part of the Milpa PHP framework.
PHP★ 0↓ 2,247/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/command
Command-as-atom core for the Milpa PHP framework: the surface-agnostic Operation value object + CommandProvider and SurfaceProjector contracts. One operation, N surfaces.
PHP★ 0↓ 2,060/moAug 13, 2026
Apache-2.0Aug 13, 2026 · metrics 2.10.0
Packagist
56Moderatehealth index
getmilpa/console
The projection layer of the Milpa PHP framework: one declared Operation, projected to the shape each surface speaks — CLI, MCP and TUI.
PHP★ 0↓ 3,207/moAug 28, 2026
Apache-2.0Aug 28, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/container
The reference implementation of Milpa Core's DIContainerInterface — reflection autowiring, circular-dependency detection. Apache-2.0.
PHP★ 0↓ 2,251/moAug 17, 2026
Apache-2.0Aug 17, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/core
Milpa Core — framework-agnostic contracts & primitives for the Milpa PHP framework (DI, plugins, events, value objects). Apache-2.0.
PHP★ 0↓ 2,195/moAug 1, 2026
Apache-2.0Aug 1, 2026 · metrics 2.10.0
Packagist
54Moderatehealth index
getmilpa/data
Runtime-native persistence for Milpa — plain entities + a pluggable repository (file/in-memory), zero Doctrine, zero DB.
PHP★ 0↓ 3,012/moSep 7, 2026
Apache-2.0Sep 7, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/devtools
The generate-verify-inspect loop for Milpa apps — generators, doctors, validators. Apache-2.0.
PHP★ 0↓ 2,434/moAug 30, 2026
Apache-2.0Aug 30, 2026 · metrics 2.10.0
Packagist
56Moderatehealth index
getmilpa/event-store
A tiny append-only event log — append, replay a stream, project state from the fold. Zero dependencies.
PHP★ 0↓ 3,538/moSep 6, 2026
Apache-2.0Sep 6, 2026 · metrics 2.10.0
Packagist
56Moderatehealth index
getmilpa/events
The reference Milpa event dispatcher — priorities, dot-segment wildcards, async seam. Apache-2.0.
PHP★ 0↓ 2,271/moAug 14, 2026
Apache-2.0Aug 14, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/http
PSR-15-native routing contracts for the Milpa PHP framework, built on milpa/core. Apache-2.0.
PHP★ 0↓ 2,005/moAug 14, 2026
Apache-2.0Aug 14, 2026 · metrics 2.10.0
Packagist
56Moderatehealth index
getmilpa/live
Render-target-agnostic live components for the Milpa framework — same component to web AND terminal. Apache-2.0.
PHP★ 0↓ 2,293/moAug 17, 2026
Apache-2.0Aug 17, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/live-tui
Terminal transport layer for Milpa Live: retained-mode TUI runtime with virtual-buffer diffing, its own ANSI painter, and the node renderers that paint Milpa Live components in the terminal.
PHP★ 0↓ 4,300/moSep 7, 2026
Apache-2.0Sep 7, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/plugin
GitHub-native plugin distribution for the Milpa framework — semver resolution, manifests, lock file. Apache-2.0.
PHP★ 0↓ 2,069/moAug 14, 2026
Apache-2.0Aug 14, 2026 · metrics 2.10.0
Packagist
56Moderatehealth index
getmilpa/resolver
Milpa Resolver — resolve the architecture before booting it: contracts, capabilities, surfaces and host profiles into a learnable ResolutionReport. Apache-2.0.
PHP★ 0↓ 2,217/moAug 14, 2026
Apache-2.0Aug 14, 2026 · metrics 2.10.0
Packagist
57Moderatehealth index
getmilpa/runtime
The bootable Milpa kernel — composes the family into a running app.
PHP★ 0↓ 3,773/moSep 3, 2026
Apache-2.0Sep 3, 2026 · metrics 2.10.0
Packagist
54Moderatehealth index
getmilpa/tool-runtime
AI tool-execution runtime for the Milpa PHP framework — registry pipeline, #[Tool] attributes, policy gate, human verification. Apache-2.0.
PHP★ 0↓ 2,107/moAug 14, 2026
Apache-2.0Aug 14, 2026 · metrics 2.10.0
Pendinghealth index
getnuvo/nuvo-adapters
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
npm
31At Riskhealth index
getonramp/onramp-sdk
Public React Native, Expo, React, Next.js, web and Flutter SDKs for OnRamp Analytics.
TypeScript · Dart★ 0↓ 5,529/moAug 22, 2026
MITAug 22, 2026 · metrics 2.10.0
Go
89Excellenthealth index
getoptimum/optimum-common
This library will serve as the shared SDK for Optimum projects.
Go★ 0Sep 6, 2026
BSD-3-ClauseSep 6, 2026 · metrics 2.10.0
Go
81Excellenthealth index
getporter/az-mixin
An Azure CLI mixin for Porter
Go★ 0Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
npm
57Moderatehealth index
getrheo/rheo-contracts
Shared types, manifest schemas, and SDK HTTP contracts for Rheo
TypeScript★ 0↓ 112/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
59Moderatehealth index
getrheo/rheo-js
Shared TypeScript runtime packages for Rheo mobile SDKs
TypeScript★ 0↓ 510/moSep 9, 2026
MITSep 9, 2026 · metrics 2.10.0