Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,521
Monthly downloads under inspection
588B
Median health index
60 Moderate
67,521 recordsRanked by popularity · browse by tag · record statistics
npm
62Moderatehealth index
keshavsoft/express-fix-any-js
No repository description published.
JavaScript★ 0↓ 486/moSep 11, 2026
Custom licenseSep 11, 2026 · metrics 2.10.0
Go
51Moderatehealth index
keshon/datastore
An embedded Go store for small datasets that must not be lost. Everything lives in memory. Every commit is appended to a write-ahead log and fsynced before it is acknowledged.
Go★ 0Sep 8, 2026
MITSep 8, 2026 · metrics 2.10.0
npm
67Goodhealth index
kestra-io/kestra-devtools
an internal utility for our team
TypeScript★ 0↓ 6,408/moAug 2, 2026
No licenseAug 2, 2026 · metrics 2.10.0
Maven
17Criticalhealth index
kestros/kestros-root-project
Base Kestros project build manager. Contains dependency and plugin versions for building and installing Bundles and Packages to Kestros instances.
Mixed★ 0Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.10.0
PyPI
30At Riskhealth index
keurfonluu/meshio
:spider_web: input/output for many mesh formats
Python★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
crates.io · PyPI
26At Riskhealth index
kevinaboos/x86_64
Library to program x86_64 hardware.
Rust★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 2.10.0
14Criticalhealth index
kevinburke/justrun
A tool that watches files, and runs possibly long-lived commands when they change.
Go★ 0Sep 3, 2026
MITSep 3, 2026 · metrics 2.10.0
npm
23At Riskhealth index
kevinfrei/packages
My 'core' set of NPM packages for TypeScript, NodeJS, and React
TypeScript★ 0Aug 2, 2026
UnlicenseAug 2, 2026 · metrics 2.10.0
Pendinghealth index
kevinheavey/solders
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go · npm · PyPI
35Weakhealth index
kevinpollet/traefik
The Cloud Native Edge Router
Go★ 0Aug 29, 2026
MITAug 29, 2026 · metrics 2.10.0
14Criticalhealth index
kevinushey/rstudio
RStudio is an integrated development environment (IDE) for R
Java · C++ · JavaScript★ 0Jul 29, 2026
Custom licenseJul 29, 2026 · metrics 2.10.0
15Criticalhealth index
kevinwern/git
Git Source Code Mirror - This is a publish-only repository and all pull requests are ignored. Please follow Documentation/SubmittingPatches procedure for any of your improvements.
C · Shell★ 0Aug 24, 2026
Custom licenseAug 24, 2026 · metrics 2.10.0
Go
63Moderatehealth index
keycardai/go-sdk
Keycard Go SDK — OAuth, MCP, and aggregate packages
Go★ 0Sep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
npm
48Weakhealth index
keycloakify/keycloak-ui-shared
No repository description published.
TypeScript★ 0↓ 16.5K/moSep 9, 2026
Custom licenseSep 9, 2026 · metrics 2.10.0
Go
41Weakhealth index
keymint-dev/Keymint-Go
License key validation, activation, and management. Supports node-locking, offline licensing, and hardware fingerprinting.
Go★ 0Aug 23, 2026
MITAug 23, 2026 · metrics 2.10.0
npm · Maven
56Moderatehealth index
keyneom/sync-kit
No repository description published.
TypeScript · Kotlin★ 0↓ 2,666/moJul 23, 2026
MITJul 23, 2026 · metrics 2.10.0
crates.io · npm
39Weakhealth index
keystone-db/keystonedb
Single-file, embedded, DynamoDB-style database written in Rust
Rust★ 0↓ 47/moJul 22, 2026
No licenseJul 22, 2026 · metrics 2.10.0
Go
47Weakhealth index
keytiles/lib-sets-golang
Implementation of Set data structure
Go★ 0Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 2.10.0
Go
35Weakhealth index
kfcmobile/dubbo-go
Go Implementation For Apache Dubbo
Go★ 0Aug 16, 2026
Apache-2.0Aug 16, 2026 · metrics 2.10.0
Go
50Moderatehealth index
kfet/harb
Self-hosted RSS server. Plain-text storage, Google-Reader-compatible API, embedded htmx web UI. Single Go binary.
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
36Weakhealth index
kfet/mintick
Tiny LLM-friendly scheduled-task CLI over systemd-user/launchd — single static Go binary, also a fir extension
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 2.10.0
Go
53Moderatehealth index
kfet/poe-acp
HTTP relay between Poe server bots and ACP-speaking agents
Go★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
Go
48Weakhealth index
kfet/slack-acp
Standalone Slack bot relaying threads to ACP-speaking agents (fir, claude-code, etc.)
Go★ 0Aug 1, 2026
MITAug 1, 2026 · metrics 2.10.0
Go · npm
48Weakhealth index
kforbus3/Fleet-Terminal
Browser-only privileged access management (PAM) for Linux fleets — SSH through a jump host with ephemeral SSH certificates, session recording, and tamper-evident audit.
Go · TypeScript · HTML★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 2.10.0
Go
44Weakhealth index
kgruel/subtask
Claude Skill to do your tasks with subagents in Git worktrees
Go★ 0Jul 21, 2026
MITJul 21, 2026 · metrics 2.10.0
Go
44Weakhealth index
khan-lau/file-rotatelogs
fork by github.com/lestrrat-go/file-rotatelogs
Go★ 0Aug 5, 2026
MITAug 5, 2026 · metrics 2.10.0
Go
35Weakhealth index
khan-lau/kconfig
通用的多格式配置文件读取库,支持 **json / json5 / jsonc / yaml / toml / hcl**
Go★ 0Aug 23, 2026
MITAug 23, 2026 · metrics 2.10.0