Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,637
Monthly downloads under inspection
386B
Median health index
57 Moderate
11,070 recordsRanked by popularity · browse by tag · record statistics
Go
37At riskhealth index
reactivego/scheduler
Task schedulers for Go
Go★ 7Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
crates.io
42At riskhealth index
rich-ayr/doxygen-bindgen
Converts Doxygen comments into Rustdoc markdown
Rust★ 7↓ 6,316/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
57Moderatehealth index
sagikazarmark/locafero
Finder library for Afero
Go★ 7Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
npm
62Moderatehealth index
sanity-io/comlink
Robust http-like coms over iframes and windows using postMessage
TypeScript★ 7↓ 8.8M/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Packagist
62Moderatehealth index
sanmai/di-container
dependency injection container with automatic constructor dependency resolution; when less is more
PHP★ 7↓ 788.3K/moJul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
npm
67Moderatehealth index
sashiksu/postal-code-checker
postal-code-checker is a comprehensive JavaScript/TypeScript package for validating postal codes across multiple countries. It provides an easy-to-use API for country selection and postal code validation, making it ideal for forms and address validation in web applications.
TypeScript★ 7↓ 90.1K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
43At riskhealth index
sbt/ivy
patched Apache Ivy for sbt
Java★ 7Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
crates.io
60Moderatehealth index
sebastienrousseau/dtt
Rust crate for date, time, and timezone manipulation. Parse, format, validate, and convert RFC 3339 / ISO 8601 with guaranteed round-trip safety.
Rust★ 7↓ 5,328/moJul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
crates.io
62Moderatehealth index
sebastienrousseau/html-generator
A Rust library that turns Markdown into WCAG-compliant, SEO-friendly HTML — front matter, TOC, JSON-LD, MathML, Mermaid, and minification in one pipeline. Runs natively or as WebAssembly.
Rust★ 7↓ 2,077/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
PyPI
61Moderatehealth index
serhiy-storchaka/cpython
The Python programming language
Python · C★ 7Jul 27, 2026
Custom licenseJul 27, 2026 · metrics 1.13.0
Packagist · Go
68Moderatehealth index
sumup/sumup-php
PHP SDK for the SumUp API.
PHP · Go★ 7↓ 2,071/moJul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 1.13.0
42At riskhealth index
sungaila/pdfium-binaries
📰 Blazor WebAssembly binaries of PDFium
Shell · CMake★ 7Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
npm
52Moderatehealth index
swaplab-engine/cordova-plugin-admob-nextgen
🚀 Cordova AdMob Next-Gen Support Capacitor or Framework7
Java · Objective-C · JavaScript★ 7↓ 422/moJul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
NuGet
43At riskhealth index
takiru/Metroit
Several classes to support logic, and WinForms extension control. Target framework is .NETFramework 2.0, 4.5 and .NET 8+.
C#★ 7Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
68Moderatehealth index
tastyigniter/ti-ext-cart
A TastyIgniter extension that allows you to easily add a shopping cart to your site.
PHP★ 7↓ 2,421/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go
66Moderatehealth index
thediveo/morbyd
Easily build and run throw-away test Docker images and containers, and run commands inside them using this thin layer on top of the standard Docker Go client.
Go★ 7Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
npm · RubyGems · Go +1
60Moderatehealth index
tradik/schema-resume
JSON Schema for CV/Resume parsing and validation. Self-hosted with JSON-LD, Schema.org integration, online validator, converter tools, and XML support.
JavaScript · HTML · XSLT★ 7↓ 11/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
crates.io
42At riskhealth index
udbhav1/office-crypto
Pure Rust library to decrypt password-protected MS Office files
Rust★ 7↓ 10.3K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
37At riskhealth index
unxed/pureffi
purego api on a top of goffi
Go★ 7Jul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 1.13.0
54Moderatehealth index
vasild/bitcoin
Bitcoin Core integration/staging tree
C++ · Python · C★ 7Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
47At riskhealth index
vivid-money/vtunnel
No repository description published.
Go★ 7Jul 29, 2026
No licenseJul 29, 2026 · metrics 1.13.0
Maven
57Moderatehealth index
weimin96/oss-spring-boot-starter
oss-spring-boot-starter is a toolkit based on Spring Boot and Amazon S3. With this toolkit, you can easily perform operations related to OSS (Object Storage Service) storage. 基于springboot的对象存储工具。
Java★ 7Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
npm
66Moderatehealth index
whotracksme/webextension-packages
No repository description published.
JavaScript★ 7↓ 2,748/moJul 23, 2026
MPL-2.0Jul 23, 2026 · metrics 1.13.0
Go · crates.io · Maven +1
63Moderatehealth index
worldcoin/idkit
Core IDKit SDK. World ID SDK for Relying Parties.
TypeScript · Rust★ 7Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Hex
59Moderatehealth index
woylie/spek
Boolean expression engine for Elixir
Elixir★ 7↓ 2,110/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
66Moderatehealth index
wso2/open-cloud-datacenter
Open cloud datacenter initiative
HCL★ 7Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 1.13.0
Go · npm
64Moderatehealth index
xavidop/mamori
Typed, watchable config and secrets for Go: load from 30+ providers into validated structs, reconciled at runtime without a restart.
Go★ 7Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
RubyGems · npm
70Goodhealth index
yegor256/judges
Executor of Ruby scripts that update a Factbase both adding new and modifying facts inside it
Ruby · Gherkin★ 7Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
38At riskhealth index
z3ntu/libopenrazer
Qt wrapper around the D-Bus API from OpenRazer
C++★ 7Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
Go
43At riskhealth index
zperetz/nfqcooldown
Experimental NFQUEUE-based TCP connection pacing daemon with pluggable cooldown algorithms.
Go★ 7Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0