Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
45,289
Monthly downloads under inspection
387B
Median health index
57 Moderate
9,689 recordsRanked by popularity · browse by tag · record statistics
npm
16Criticalhealth index
windborne/grapher
No repository description published.
HTML · JavaScript★ 1↓ 3,187/moJul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
Go · npm
54Moderatehealth index
wu/keyop-messenger
Fast, lightweight, federated pub-sub messaging library for Go with at-least-once delivery guarantees, offline resilience, and mTLS security
Go★ 1Jul 25, 2026
BSD-2-ClauseJul 25, 2026 · metrics 1.13.0
38At riskhealth index
wuzenghai616-lang/goldbean
x402 Micropaid MCP Server — 51 Baidu AI tools for global developers. Pay-per-call with USDC, PayPal, or Alipay. No Chinese phone number needed.
JavaScript★ 1Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
npm · PyPI · Go +2
54Moderatehealth index
xag/flight-recorder
A library that records a program's external inputs — database, HTTP, clock, randomness — and replays them, so any past run can be reproduced and debugged exactly.
Python · Java · PHP★ 1↓ 2,148/moJul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
npm · Go
59Moderatehealth index
xaligo/xaligo
A Go CLI tool that converts a Vue-style DSL (.xal) into Excalidraw JSON. Includes Vuetify-style spacing/grid layout and AWS architecture diagram group tags.
Go★ 1↓ 3,261/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go
43At riskhealth index
xgfone/goapp
GoApp is used to simply the creation of the common application.
Go★ 1Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 1.13.0
npm
48At riskhealth index
xuhancn/hermes-to-claude
Local MCP bridge between Hermes Agent and Claude Code — no Pro/Max required
JavaScript★ 1↓ 3,941/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
54Moderatehealth index
xynehq/blocknote-layout
No repository description published.
TypeScript · CSS★ 1↓ 9,183/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go · Maven
32At riskhealth index
yawaflua/GoMinecraftBridge
No repository description published.
Java · Go★ 1Jul 28, 2026
No licenseJul 28, 2026 · metrics 1.13.0
npm
55Moderatehealth index
ytspar/devbar
Development tools: DevBar and Sweetlink
TypeScript★ 1↓ 17.4K/moJul 30, 2026
MITJul 30, 2026 · metrics 1.13.0
npm
51Moderatehealth index
yuanguangshan/npm_yuangs
my personal tools
TypeScript★ 1↓ 2,375/moJul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
Go
57Moderatehealth index
yupsh/repl
Yup Shell — the interactive REPL for the yup.sh / gloo-foo command ecosystem
Go · Makefile★ 1Jul 25, 2026
AGPL-3.0Jul 25, 2026 · metrics 1.13.0
Go
59Moderatehealth index
yuriolisa/opentelemetry-operator
Kubernetes Operator for OpenTelemetry Collector
Go★ 1Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
45At riskhealth index
zach-source/ccswitch
Multi-account switcher and usage monitor for Claude Code
Go★ 1Jul 29, 2026
MITJul 29, 2026 · metrics 1.13.0
npm
57Moderatehealth index
zaclummys/sf-plugin-permission-sets
Declarative, GitOps-style management of permission set assignments for Salesforce orgs.
TypeScript · JavaScript★ 1↓ 8,679/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Go
45At riskhealth index
zhiyunliu/golibs
No repository description published.
Go★ 1Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 1.13.0
Go
26Criticalhealth index
zoon-format/zoon-go
No repository description published.
Go★ 1Jul 29, 2026
No licenseJul 29, 2026 · metrics 1.13.0
PyPI
47At riskhealth index
zxdawn/satpy
Python package for earth-observing satellite data processing
Python★ 1Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
Go
26Criticalhealth index
0x5ea000000/cosmos-sdk
:chains: A Framework for Building High Value Public Blockchains :sparkles:
Go★ 0Jul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 1.13.0
npm
55Moderatehealth index
0xDjole/arky-sdk
No repository description published.
TypeScript · JavaScript★ 0↓ 3,754/moJul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
Go
41At riskhealth index
0xMoonrise/gochive
My personal archive to store PDF and markdown files
Go · JavaScript · CSS★ 0Jul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
Go
34At riskhealth index
0xelden/common-libs-go
helper gin golang
Go★ 0Jul 28, 2026
No licenseJul 28, 2026 · metrics 1.13.0
Go
45At riskhealth index
0xf0xx0/stratum
bitcoin stratum v1 lib for go
Go★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
Go
58Moderatehealth index
0xnu/govuk-frontend-go
GOV.UK Design System integration for Go, with a Gin adapter.
JavaScript · HTML · SCSS★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go · npm
39At riskhealth index
10/httpcloak
Go HTTP client with browser-identical TLS/HTTP2 fingerprinting. Bypass bot detection by perfectly mimicking Chrome, Firefox, and Safari at the cryptographic level (JA3/JA4, Akamai fingerprint, header order). Supports HTTP/1.1, HTTP/2, HTTP/3, sessions, cookies, and proxies.
Go · C#★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Maven
38At riskhealth index
1996fanrui/streampark
StreamPark, Make stream processing easier! easy-to-use streaming application development framework and operation platform
Java · Scala · TypeScript★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go · npm
58Moderatehealth index
3011/cfscan
Distributed Cloudflare Anycast IP scanning, ranking, and monitoring platform.
TypeScript · Go★ 0Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
npm
38At riskhealth index
32bitkid/4bitlabs.bits
A collection of low-level bit and byte utilities.
TypeScript★ 0↓ 3,468/moJul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
npm · PyPI
41At riskhealth index
3coins/jupyter_server
The backend—i.e. core services, APIs, and REST endpoints—to Jupyter web applications.
Python★ 0Jul 25, 2026
BSD-3-ClauseJul 25, 2026 · metrics 1.13.0