Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
97,752
Monthly downloads under inspection
650B
Median health index
59 Moderate
97,752 recordsRanked by popularity · browse by tag · record statistics
PyPI
17Criticalhealth index
tannewt/huffman
Generate Huffman codes with Python
Python★ 0Sep 11, 2026
MITSep 11, 2026 · metrics 2.10.0
npm
26At Riskhealth index
tantulabs/cascade-hardware-monitor
No repository description published.
TypeScript★ 0↓ 44/moSep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Go
17Criticalhealth index
taoky/rsync-proxy
No repository description published.
Go★ 0Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
Go
34At Riskhealth index
taouniverse/tao-redis
Config redis client
Go · Makefile★ 0Sep 13, 2026
Apache-2.0Sep 13, 2026 · metrics 2.10.0
Go
34At Riskhealth index
taouniverse/tao-zap
No repository description published.
Go★ 0Sep 10, 2026
Apache-2.0Sep 10, 2026 · metrics 2.10.0
—
–Pendinghealth index
tappass/tappass-sdk
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
48Weakhealth index
tapsilat/aurora-go-sdk
Official Go SDK for the Aurora
Go★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
36Weakhealth index
taq25/templ-lint
Security linter for a-h/templ: detects XSS-prone htmx / Alpine.js usage by parsing .templ files directly with parser/v2
Go★ 0Sep 9, 2026
MITSep 9, 2026 · metrics 2.10.0
Go
67Goodhealth index
tarantool/go-config
Flexible configuration management system.
Go★ 0Oct 19, 2026
BSD-2-ClauseOct 19, 2026 · metrics 2.10.0
Go
54Moderatehealth index
tarantool/go-gostcrypto
Pure-Go, dependency-free clean-room GOST crypto primitives (Streebog, Kuznyechik, Magma, 34.10, GOST X.509)
Go★ 0Oct 19, 2026
BSD-2-ClauseOct 19, 2026 · metrics 2.10.0
Go
59Moderatehealth index
tarantool/go-gostls
Pure-Go, cgo-free TLS 1.2 client with GOST cipher suites, shaped like crypto/tls
Go★ 0Oct 20, 2026
BSD-2-ClauseOct 20, 2026 · metrics 2.10.0
Go
28At Riskhealth index
tarantool/go-openssl
OpenSSL bindings for Go
Go · C★ 0Sep 12, 2026
Apache-2.0Sep 12, 2026 · metrics 2.10.0
Go
50Moderatehealth index
tarantool/go-tail
[Revamped] Go package for reading from continuously updated files (tail -f)
Go★ 0Oct 19, 2026
MITOct 19, 2026 · metrics 2.10.0
Go
62Moderatehealth index
tarantool/go-tlog
Lightweight, configurable structured logging for Go — text/JSON output, log levels, and automatic stacktraces
Go★ 0Oct 18, 2026
BSD-2-ClauseOct 18, 2026 · metrics 2.10.0
Go
62Moderatehealth index
tarantool/go-xlog
Pure-Go reader/writer for Tarantool journal files (.xlog/.snap/.vylog)
Go★ 0Sep 19, 2026
BSD-2-ClauseSep 19, 2026 · metrics 2.10.0
Go
53Moderatehealth index
tarasglek/caddy-reverse-bin
Modern CGI-bin for reverse proxies: drop in an executable, let Caddy spawn it on demand, and proxy requests to it.
Go★ 0Sep 13, 2026
MITSep 13, 2026 · metrics 2.10.0
crates.io
16Criticalhealth index
tarcieri/bytes
Utilities for working with bytes
Rust★ 0Sep 13, 2026
Custom licenseSep 13, 2026 · metrics 2.10.0
Go
35Weakhealth index
tarek-saimouah/slifer
A terminal UI for generating passwords, API keys, and JWT signing secrets
Go★ 0Oct 19, 2026
Custom licenseOct 19, 2026 · metrics 2.10.0
Go
41Weakhealth index
taresky/codex-reset-guard
Use expiring Codex reset credits automatically.
Go★ 0Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
33At Riskhealth index
tarmalonchik/golibs
No repository description published.
Go★ 0Oct 20, 2026
No licenseOct 20, 2026 · metrics 2.10.0
Go
25At Riskhealth index
tartavull/mcp-manager
Proxy for stdin/out mcp servers
Go★ 0Sep 24, 2026
No licenseSep 24, 2026 · metrics 2.10.0
Go
41Weakhealth index
tarun-sri-sai/knotwork
No repository description published.
Go★ 0Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
75Goodhealth index
tasuku43/cc-bash-guard
Declarative, testable command-string policy engine for AI agents and shells
Go★ 0Sep 12, 2026
MITSep 12, 2026 · metrics 2.10.0
Go
35Weakhealth index
tathienbao/quant-bot
No repository description published.
Go★ 0Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
npm
62Moderatehealth index
taucad/libassimp
Assimp for TypeScript and WebAssembly: import 69 3D formats and export 15 formats in browsers and Node.js.
TypeScript · JavaScript · C++★ 0↓ 2,446/moOct 13, 2026
Apache-2.0Oct 13, 2026 · metrics 2.10.0
npm · crates.io
50Moderatehealth index
taucad/openrscad
A repository for faster-scad
Rust · TypeScript★ 0↓ 2,409/moOct 13, 2026
Apache-2.0Oct 13, 2026 · metrics 2.10.0
Go
50Moderatehealth index
taurusgroup/pulsar-client-go
Apache Pulsar Go Client Library
Go★ 0Oct 18, 2026
Apache-2.0Oct 18, 2026 · metrics 2.10.0
—
–Pendinghealth index
tavgar/JSMiner
No repository description published.
Mixed★ 0Not scanned yet
No licenseAwaiting first inspection
Go
34At Riskhealth index
tavocg/go-auth
Golang authentication library.
Go★ 0Sep 15, 2026
GPL-3.0Sep 15, 2026 · metrics 2.10.0