Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
46,036
Monthly downloads under inspection
388B
Median health index
57 Moderate
9,488 recordsRanked by popularity · browse by tag · record statistics
PyPI
29Criticalhealth index
msdemlei/pyvo
An Astropy affiliated package providing access to remote data and services of the Virtual observatory (VO) using Python.
Python★ 0Jul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 1.13.0
Go
44At riskhealth index
msg7086/lucid-bbcode
bbcode library porting to golang
Go★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
44At riskhealth index
msg7086/lucid-markup
No repository description published.
Go★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
38At riskhealth index
msjurset/golars
A high-performance DataFrame library for Go, modeled after Polars
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go · npm
18Criticalhealth index
mtardy/tetragon
eBPF-based Security Observability and Runtime Enforcement
Go · C★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Maven
32At riskhealth index
mturkia/subsurface
This isn't the official upstream - please use Subsurface-divelog/subsurface
C++ · C★ 0Jul 27, 2026
GPL-2.0Jul 27, 2026 · metrics 1.13.0
Go
40At riskhealth index
mulan-ext/auth
Mulan Ext - Auth
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
40At riskhealth index
mulan-ext/captcha
No repository description published.
Go★ 0Jul 29, 2026
MITJul 29, 2026 · metrics 1.13.0
Go
40At riskhealth index
mulan-ext/dbx
Mulan Ext DBX
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
40At riskhealth index
mulan-ext/log
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
27Criticalhealth index
mulan-ext/passwd
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
27Criticalhealth index
mulan-ext/rdb
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
30At riskhealth index
mulan-ext/req
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
30At riskhealth index
mulan-ext/rsp
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
29Criticalhealth index
mulan-ext/vault
No repository description published.
Go★ 0Jul 28, 2026
No licenseJul 28, 2026 · metrics 1.13.0
Go
34At riskhealth index
mulan-ext/web
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
31At riskhealth index
murouse/grpc-cache
No repository description published.
Go★ 0Jul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
Go
36At riskhealth index
murouse/rate-limiter
No repository description published.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
30At riskhealth index
murouse/soma
No repository description published.
Go★ 0Jul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0
npm
33At riskhealth index
mutenorg/create-muten
No repository description published.
JavaScript★ 0↓ 3,170/moJul 29, 2026
MITJul 29, 2026 · metrics 1.13.0
npm
34At riskhealth index
mutenorg/muten
I think the future belongs to languages that are easier to use and simpler for AI to understand.
TypeScript★ 0↓ 2,945/moJul 29, 2026
MITJul 29, 2026 · metrics 1.13.0
npm · crates.io
53Moderatehealth index
mvhenten/drawio-headless
Headless authoring and rendering of drawio diagrams in Rust. No browser, no Electron.
Rust★ 0↓ 2,331/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm · PyPI
38At riskhealth index
mwakaba2/jupyter_server
The backend—i.e. core services, APIs, and REST endpoints—to Jupyter web applications.
Python★ 0Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 1.13.0
npm
36At riskhealth index
mwear/opentelemetry-js
OpenTelemetry API for Javascript (both Node and browser)
TypeScript★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
57Moderatehealth index
mycophonic/primordium
Core golang library providing base primitives and facilities for other audio projects
Go · Just★ 0Jul 28, 2026
Apache-2.0Jul 28, 2026 · metrics 1.13.0
Go
28Criticalhealth index
mzeahmed/coelakit
No repository description published.
Go★ 0Jul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
Go
49At riskhealth index
mzeahmed/noticoel
Noticoel is an event router. Notifications are just one destination.
Go · Makefile★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
46At riskhealth index
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
35At riskhealth index
nanorele/gio-x
[FORK] Mirror of the Gio x repository (https://git.sr.ht/~whereswaldon/gio-x)
Go★ 0Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 1.13.0