Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,318
Monthly downloads under inspection
386B
Median health index
57 Moderate
11,447 recordsRanked by popularity · browse by tag · record statistics
npm · crates.io · Go +1
59Moderatehealth index
ashfordeOU/grasp
GRASP — Code architecture visualizer + 150-tool MCP server. Dependency graphs, security scanning, multimodal knowledge graph, ORM tracking, git change impact, graph schema v3. Works with GitHub, GitLab & local dirs. 35 languages. Zero data collection.
HTML · TypeScript · JavaScript★ 10↓ 1,162/moJul 27, 2026
Custom licenseJul 27, 2026 · metrics 1.13.0
Go · crates.io · npm
58Moderatehealth index
bang9/ai-tools
A collection of tools for Claude Code to operate more efficiently
TypeScript · Rust · Go★ 10Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
44At riskhealth index
bclswl0827/slgo
SeedLink server protocol basic implementation in pure Go.
Go★ 10Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
npm
59Moderatehealth index
boomerang-io/carbon-addons-boomerang-react
Component library for Boomerang web applications. Built with Carbon design system. Written in React.
TypeScript · SCSS★ 10↓ 4,811/moJul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
Go
63Moderatehealth index
buildkite/buildkite-logs
A Go library and CLI tool for parsing Buildkite log files that contain OSC (Operating System Command) sequences with timestamps.
Go★ 10Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
66Moderatehealth index
carabiner-dev/bnd
Sign and package attestations in sigstore bundles
Go★ 10Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Go
46At riskhealth index
dongmu101/kit
No repository description published.
Go★ 10Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
NuGet
51Moderatehealth index
enkelmedia/Umbraco-SeoVisualizer
SEO Visualizer property editor for Umbraco
HTML · TypeScript · C#★ 10Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Packagist
77Goodhealth index
ergebnis/rector-rules
👓 Provides a composer package with rules for rector/rector.
PHP★ 10↓ 19.7K/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
65Moderatehealth index
firefox-devtools/react-contextmenu
This is a fork of the original react-contextmenu, to fix a few bugs that were impairing the Firefox Profiler.
JavaScript★ 10↓ 10.4K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
51Moderatehealth index
fisker/shared-configs
fisker's shared project config
JavaScript★ 10↓ 6,655/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
34At riskhealth index
flexmonster/js-pivot-table
JavaScript Pivot table & Charts by Flexmonster
Mixed★ 10Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
Go
57Moderatehealth index
Go★ 10Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
PyPI · crates.io
66Moderatehealth index
gnpaone/rust-just
🤖 Just a command runner
Rust★ 10↓ 1.7M/moJul 24, 2026
CC0-1.0Jul 24, 2026 · metrics 1.13.0
Go
45At riskhealth index
go-git/gcfg
go-gcfg/gcfg fork for usage in src-d/go-git
Go★ 10Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 1.13.0
PyPI · npm
53Moderatehealth index
greghavens/moonshiner
Unified model-distillation harness for code abilities: pi / claude-code / codex teachers, configurable judge, verified agentic traces
Python★ 10Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 1.13.0
npm
51Moderatehealth index
hidekatsu-izuno/jtc-utils-js
Utilities for Japanese Traditional Companies
TypeScript★ 10↓ 2,484/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
68Moderatehealth index
humanmade/altis-security
Security Module for Altis
PHP★ 10↓ 5,310/moJul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
Packagist
65Moderatehealth index
infection/codeception-adapter
Codeception Test Framework Adapter for Infection
PHP★ 10↓ 5,095/moJul 23, 2026
BSD-3-ClauseJul 23, 2026 · metrics 1.13.0
npm
49At riskhealth index
inspect-js/which-collection
Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.
JavaScript★ 10↓ 280M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
38At riskhealth index
isaacs/package-json-from-dist
No repository description published.
TypeScript★ 10↓ 387M/moJul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
npm
51Moderatehealth index
istanbuljs/test-exclude
test for inclusion or exclusion of paths using globs
JavaScript★ 10↓ 243M/moJul 22, 2026
ISCJul 22, 2026 · metrics 1.13.0
PyPI
64Moderatehealth index
itdove/ai-guardian
AI IDE security hook: blocks directories, scans secrets, and protects AI interactions
Python★ 10Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
PyPI · Go
70Goodhealth index
jeduden/mdsmith
fast, auto-fixing Markdown linter and formatter. Checks style, readability, structure, and cross-file integrity.
Go★ 10↓ 1,334/moJul 27, 2026
Custom licenseJul 27, 2026 · metrics 1.13.0
NuGet
61Moderatehealth index
jeff377/bee-library
Bee.NET — A modular, definition-driven .NET framework for enterprise apps. N-Tier + Clean Architecture + MVVM.
C#★ 10Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
56Moderatehealth index
jholhewres/anchored
Persistent cross-tool memory for AI coding agents. Single binary. Zero dependencies.
Go★ 10Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
crates.io
60Moderatehealth index
joaquinbejar/IronFix
IronFix is a robust and efficient Rust-based implementation of the Financial Information eXchange (FIX) protocol, designed for secure and high-performance financial messaging.
Rust★ 10↓ 3,610/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0