Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
45,827
Monthly downloads under inspection
387B
Median health index
57 Moderate
9,554 recordsRanked by popularity · browse by tag · record statistics
Go
60Moderatehealth index
prefeitura-rio/app-rmi
No repository description published.
Go★ 0Jul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
npm
51Moderatehealth index
pro-design-vue/pro-design
🎉 A Vue.js 3 UI Library made by Shen
Vue · TypeScript · Less★ 0↓ 4,081/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
npm
40At riskhealth index
prolix-oc/lumiverse-spindle-types
No repository description published.
TypeScript★ 0↓ 12.3K/moJul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
npm
51Moderatehealth index
proteinjs/util
Util libs used by Protein Js
TypeScript★ 0↓ 10.7K/moJul 30, 2026
MITJul 30, 2026 · metrics 1.13.0
PyPI
57Moderatehealth index
psakievich/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm
55Moderatehealth index
psjostrom/frontload
Local-first context gateway that helps AI coding agents read less, spend less, and stay grounded in your repo.
TypeScript★ 0↓ 2,191/moJul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
Go
60Moderatehealth index
pulumi-labs/pulumi-exporter
OpenTelemetry Pulumi Cloud metrics exporter
Go★ 0Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
31At riskhealth index
punchcms/punchdb
Database Layer
Go★ 0Jul 30, 2026
No licenseJul 30, 2026 · metrics 1.13.0
Go
59Moderatehealth index
puppetlabs/go-libs
go-libs is a set of common Go libraries
Go★ 0Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 1.13.0
Go
52Moderatehealth index
puria/gg
`gg` is a small Go CLI that resolves a GitHub repository to a local checkout path, clones it if needed, and is designed to be wrapped by a shell function so `gg f credim` can still land you inside the repo.could not prompt
Go★ 0Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
npm
36At riskhealth index
python-0612/novel-skill
No repository description published.
JavaScript★ 0↓ 4,383/moJul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
14Criticalhealth index
pyvespa/vespacli
This is a PlaceHolder for Predator_97
Mixed★ 0Jul 29, 2026
No licenseJul 29, 2026 · metrics 1.13.0
npm
45At riskhealth index
pzhaojohnson/rnacanvas.math
Common math operations
JavaScript · TypeScript★ 0↓ 6,501/moJul 24, 2026
GPL-3.0Jul 24, 2026 · metrics 1.13.0
npm
48At riskhealth index
pzhaojohnson/rnacanvas.points.oopified
Work with 2D points in an object-oriented way
JavaScript · TypeScript★ 0↓ 3,366/moJul 24, 2026
GPL-3.0Jul 24, 2026 · metrics 1.13.0
13Criticalhealth index
q153877011/edgeone-nuxt-deploy
No repository description published.
Mixed★ 0Jul 29, 2026
No licenseJul 29, 2026 · metrics 1.13.0
Go
59Moderatehealth index
qingyang-hu/mongo-go-driver
The Go driver for MongoDB
Go★ 0Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Go
35At riskhealth index
qiwentaidi/clients
Package clients provides HTTP(S) client utilities based on resty, with support for custom TLS, proxy, random User-Agent, and protocol detection.
Go★ 0Jul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
Go
40At riskhealth index
qmaru/qdb
some db
Go★ 0Jul 23, 2026
No licenseJul 23, 2026 · metrics 1.13.0
crates.io
54Moderatehealth index
qubit-ltd/rs-clock
Injectable wall clocks, monotonic clocks, and deterministic timers for Rust.
Rust★ 0↓ 6,464/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
35At riskhealth index
quells/grace
Coordinate graceful startup and shutdown of concurrent, long-running tasks in Go
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm · Go
29Criticalhealth index
querysheriff/sqltags
No repository description published.
Go · TypeScript★ 0↓ 77/moJul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
Go · npm
47At riskhealth index
qwc/asiakirjat
Documentation hosting app, that just works. Including auth through LDAP, OAuth2 or built-in and full-text search in all docs. (Mirror from private forgejo instance)
Go★ 0Jul 28, 2026
AGPL-3.0Jul 28, 2026 · metrics 1.13.0
Go
31At riskhealth index
qweeah/oras
ORAS CLI
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
40At riskhealth index
qwerius/authgoblue
Auth Module For Go
Go★ 0Jul 30, 2026
MITJul 30, 2026 · metrics 1.13.0
Go
38At riskhealth index
rachmanzz/dcd
No repository description published.
Shell · Go★ 0Jul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
npm
63Moderatehealth index
rafay99-epic/envpilot.dev
The Ultimate tool for managing and securing the Environment Variables.
TypeScript★ 0↓ 2,507/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Maven
42At riskhealth index
rafex/ether-brain
No repository description published.
Java★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Maven
37At riskhealth index
rafex/ether-json
No repository description published.
Java★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
40At riskhealth index
raggesilver/blackbox
A beautiful terminal for GNOME (mirror)
Vala★ 0Jul 25, 2026
GPL-3.0Jul 25, 2026 · metrics 1.13.0
Go
59Moderatehealth index
rancher/cluster-api
Home for Cluster API, a subproject of sig-cluster-lifecycle
Go★ 0Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 1.13.0