Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
67,505
Monthly downloads under inspection
581B
Median health index
60 Moderate
67,505 recordsRanked by popularity · browse by tag · record statistics
Go
39Weakhealth index
pabrahamsson/cf-dyn-dns
No repository description published.
Go★ 0Jul 30, 2026
No licenseJul 30, 2026 · metrics 2.10.0
Packagist
31At Riskhealth index
packaged/http
No repository description published.
PHP★ 0↓ 2,292/moSep 3, 2026
No licenseSep 3, 2026 · metrics 2.10.0
npm
67Goodhealth index
pactus-project/js-sdk
Javascript-SDK for Pactus Blockchain
TypeScript★ 0↓ 796/moJul 25, 2026
MITJul 25, 2026 · metrics 2.10.0
Pendinghealth index
pagerinc/jackrabbit
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Pendinghealth index
pagerinc/logger
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
28At Riskhealth index
pago-sh/pago-go
No repository description published.
Go★ 0Aug 2, 2026
MITAug 2, 2026 · metrics 2.10.0
Go · npm
56Moderatehealth index
pagopa-dx/terraform-provider-azure
Terraform provider for DX on Azure, to enhance developer experience
Go★ 0Aug 24, 2026
No licenseAug 24, 2026 · metrics 2.10.0
Go · Maven
11Criticalhealth index
pagopa/terraform-provider-azurerm
Terraform provider for Azure Resource Manager
Go★ 0Jul 18, 2026
MPL-2.0Jul 18, 2026 · metrics 2.10.0
crates.io
10Criticalhealth index
paiml/batuta-common
MOVED → https://github.com/paiml/aprender (crates/aprender-common)
Rust★ 0↓ 5,972/moAug 30, 2026
No licenseAug 30, 2026 · metrics 2.10.0
Pendinghealth index
paivapiovesan/next-finance-mcp
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
86Excellenthealth index
paketo-buildpacks/apache-tomee
A Cloud Native Buildpack that contributes Apache Tomee and Process Types for the application server
Go★ 0Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
Go
75Goodhealth index
paketo-buildpacks/composer
No repository description published.
Go · Shell★ 0Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
Go
77Goodhealth index
paketo-buildpacks/php-fpm
A Cloud Native Buildpack for configuring FPM (FastCGI Process Manager)
Go · Shell★ 0Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
Go
77Goodhealth index
paketo-buildpacks/php-httpd
PHP HTTPD Buildpack to set up HTTPD and serve PHP applications
Go · Shell★ 0Jul 21, 2026
Apache-2.0Jul 21, 2026 · metrics 2.10.0
Go
81Excellenthealth index
paketo-buildpacks/poetry-install
No repository description published.
Go · Shell★ 0Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 2.10.0
Go
81Excellenthealth index
paketo-buildpacks/watchexec
A Cloud Native Buildpack that provides the watchexec binary tool
Go★ 0Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 2.10.0
Go
77Goodhealth index
paketo-community/pipenv-install
No repository description published.
Go · Shell★ 0Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 2.10.0
Go
50Moderatehealth index
palchukovsky/just-mcp-work
Just work with your workspace - over MCP. Stop burning agent context on build files, local STDIO MCP server: one interface to everything runnable in a workspace, handing the agent only the part it asked for.
Go★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 2.10.0
Go
28At Riskhealth index
palgroup/authctx
No repository description published.
Go★ 0Jul 18, 2026
No licenseJul 18, 2026 · metrics 2.10.0
Pendinghealth index
palgroup/palbase-ts
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Pendinghealth index
palladiumkenya/kenyaemr-esm-3.x
No repository description published.
Mixed★ 0↓ 0/moNot scanned yet
No licenseAwaiting first inspection