Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
45,289
Monthly downloads under inspection
387B
Median health index
57 Moderate
9,689 recordsRanked by popularity · browse by tag · record statistics
Go
26Criticalhealth index
werne2j/argocd-vault-plugin
An ArgoCD plugin to retrieve secrets from Hashicorp Vault and inject them into Kubernetes secrets
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
48At riskhealth index
westonsteimel/grype
A vulnerability scanner for container images and filesystems
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
49At riskhealth index
whilesmartgo/agents
Provider-agnostic foundation for AI tool-calling agents in Go
Go★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
41At riskhealth index
whilesmartgo/mcp
Expose a whilesmartgo/agents tool set over the Model Context Protocol
Go★ 0Jul 30, 2026
MITJul 30, 2026 · metrics 1.13.0
npm · crates.io
33At riskhealth index
wiber/thetacog-mcp
npx thetacog-mcp — a decidable, on-chip, LLM-free placement receipt a stranger recomputes byte-for-byte. Free for builders; patent-licensed for production & financial use (US Patent App. 19/637,714).
JavaScript · HTML★ 0↓ 4,326/moJul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0
crates.io
31At riskhealth index
wiiznokes/libcosmic
WIP library for COSMIC applications
Rust★ 0Jul 25, 2026
MPL-2.0Jul 25, 2026 · metrics 1.13.0
Go
55Moderatehealth index
williamokano/claude-status-line-go
A status line for Claude Code: rate-limit windows, context, tokens, cache hit rate and session cost — in two lines under your prompt.
Go★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
47At riskhealth index
wim-vdw/az-secret2env
Execute a program with environment variables temporarily populated by Azure Key Vault secrets
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
npm
48At riskhealth index
wireservers/react-natives
No repository description published.
TypeScript★ 0↓ 3,427/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
66Moderatehealth index
wizzcomms/wizz-method
Método de agência orientado por IA, em PT-BR. Um maestro lê seu pedido e chama o agente certo. Fork independente do BMad Method.
JavaScript · HTML★ 0↓ 2,935/moJul 25, 2026
Custom licenseJul 25, 2026 · metrics 1.13.0
npm
63Moderatehealth index
wkoverfield/switchboard
A firewall and password manager for your AI coding agents.
TypeScript · JavaScript★ 0↓ 6,244/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
npm
52Moderatehealth index
wmantly/model-redis
Simple ORM model for redis in NodsJS
JavaScript★ 0↓ 2,035/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
PyPI
54Moderatehealth index
wmetcalf/blastbox
Reusable detonation framework: run untrusted documents through disposable, hardened workers
Python★ 0↓ 1,346/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Hex
17Criticalhealth index
wojtekmach/earmark_parser
The Markdown to AST part of Earmark.
Elixir★ 0Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
Hex
26Criticalhealth index
wojtekmach/mime
A read-only and immutable MIME type module for Elixir
Elixir★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
Maven
43At riskhealth index
wolfboys/streampark
Make stream processing easier! Easy-to-use streaming application development framework and operation platform.
Java · Scala · TypeScript★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
52Moderatehealth index
woodie/expect
Generics-based matcher library for Go testing
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go
52Moderatehealth index
woodie/gorderly
Rspec -fd style output for Go
Go★ 0Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
29Criticalhealth index
woodie/spec
Spec is a simple BDD-style test organizer for Go that does not replace the standard library testing package.
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Packagist
49At riskhealth index
worksome/laravel-filters
No repository description published.
PHP★ 0↓ 6,410/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Packagist · npm
53Moderatehealth index
wp-media/mcp-oauth
OAuth layer for the WordPress MCP Adapter
PHP★ 0↓ 2,535/moJul 27, 2026
GPL-3.0Jul 27, 2026 · metrics 1.13.0
Packagist · npm
50Moderatehealth index
wp-media/plugin-family
No repository description published.
PHP★ 0↓ 33.9K/moJul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
crates.io
37At riskhealth index
wpaulino/rust-lightning
A highly modular Bitcoin Lightning library written in Rust. Its Rust-Lightning, not Rusty's Lightning!
Rust★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
Go
34At riskhealth index
wrennhq/go-sdk
Go SDK for Wrenn
Go★ 0Jul 29, 2026
MITJul 29, 2026 · metrics 1.13.0
PyPI
31At riskhealth index
wroberts4/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
Go
62Moderatehealth index
wso2/identity-customer-data-service
Lightweight, extensible Customer Data Server built to power personalized experiences through unified user profiles and behavior insights.
Go★ 0Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
npm
42At riskhealth index
wyrtensi/hermes-agent-npm
The agent that grows with you (unofficial npm bridge, that updates everyday from original repo)
JavaScript★ 0↓ 6,645/moJul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
39At riskhealth index
xDarkicex/nanite
Nanite: An efficient Radix-based HTTP router for Go, designed for speed and scalability, with built-in middleware and WebSocket support.
Go★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
39At riskhealth index
xhd2015/bak-files
backup your dot files
Go★ 0Jul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
Go
38At riskhealth index
xhd2015/tty-watch
headless TUI testing tool, it is for TUI as playwright is for browser
Go★ 0Jul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0