Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,173
Monthly downloads under inspection
386B
Median health index
57 Moderate
11,840 recordsRanked by popularity · browse by tag · record statistics
npm · Go
40At riskhealth index
vpecinka/mattermost-plugin-agents
Mattermost Agents plugin supporting multiple LLMs
Go · TypeScript★ 0↓ 1,128/moJul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
28Criticalhealth index
vroldanbet/spicedb
Inspired by Google's Zanzibar paper, SpiceDB is an open source database system for managing security-critical application permissions.
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
46At riskhealth index
vseplet/f2f
friend to friend
Go · JavaScript · HTML★ 0Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 1.13.0
npm
50Moderatehealth index
vtex/cli-plugin-workspace
No repository description published.
TypeScript★ 0↓ 5,059/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
26Criticalhealth index
vue-solana/vue-solana
No repository description published.
TypeScript · Vue★ 0↓ 7,170/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
44At riskhealth index
vukyn/kuery
Go utilities
Go★ 0Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
Go
29Criticalhealth index
vvatanabe/go-openai
OpenAI ChatGPT, GPT-3, GPT-4, DALL·E, Whisper API wrapper for Go
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
49At riskhealth index
vvoland/bubbletea
A powerful little TUI framework 🏗
Go★ 0Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
59Moderatehealth index
wKovacs64/eslint-config
@wKovacs64 personal ESLint flat config
JavaScript★ 0↓ 4,536/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Maven
55Moderatehealth index
waabox/andersoni
In-memory indexed cache library for Java 21. Fluent DSL, lock-free reads, pluggable sync (Kafka, HTTP, DB), leader election, and snapshot persistence.
Java★ 0Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Go
54Moderatehealth index
wahrwelt-kit/go-httpkit
No repository description published.
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go
54Moderatehealth index
wahrwelt-kit/go-jwtkit
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
54Moderatehealth index
wahrwelt-kit/go-logkit
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
npm · Go
54Moderatehealth index
waired-ai/waired-agent
No repository description published.
Go★ 0↓ 56/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
30At riskhealth index
wangle201210/net-flux
multimedia streaming base library
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go · npm
49At riskhealth index
wappsdev/wapps-cli
wapps umbrella CLI — age secrets + Coolify shim + git auto-sync
Go · TypeScript★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
RubyGems
44At riskhealth index
washu/ruby_llm-registry
RubyLlm::Registry treats prompts as immutable artifacts stored outside your app code. It can:
Ruby★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
34At riskhealth index
wayanjimmy/privacy-filter
LLM privacy gateway in Go — millisecond-latency PII and secret redaction. Used in production by PackyCode.
Go★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
crates.io
21Criticalhealth index
waywardmonkeys/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
PyPI
49At riskhealth index
wdconinc/spack
A flexible package manager that supports multiple versions, configurations, platforms, and compilers.
Python★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
—
21Criticalhealth index
wds15/math
Stan Math Library
C++★ 0Jul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 1.13.0
Packagist
46At riskhealth index
web-vision/deeplcom-deepl-php
Provide "deeplcom/deepl-php" as shared TYPO3 extension
PHP★ 0↓ 18.6K/moJul 27, 2026
GPL-2.0Jul 27, 2026 · metrics 1.13.0
Go
52Moderatehealth index
weeb-vip/anime-api
golang anime api with graphql
Go★ 0Jul 22, 2026
Custom licenseJul 22, 2026 · metrics 1.13.0
Go
26Criticalhealth index
werne2j/argocd-vault-plugin
An ArgoCD plugin to retrieve secrets from Hashicorp Vault and inject them into Kubernetes secrets
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
48At riskhealth index
westonsteimel/grype
A vulnerability scanner for container images and filesystems
Go★ 0Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
49At riskhealth index
whilesmartgo/agents
Provider-agnostic foundation for AI tool-calling agents in Go
Go★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
59Moderatehealth index
whitworth-org/bedrock
CLI auditor for fundamental domain security controls
Go★ 0Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
46At riskhealth index
whosonfirst/go-whosonfirst
Go package for common Who's On First functionality and interfaces.
Go★ 0Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm · crates.io
33At riskhealth index
wiber/thetacog-mcp
npx thetacog-mcp — a decidable, on-chip, LLM-free placement receipt a stranger recomputes byte-for-byte. Free for builders; patent-licensed for production & financial use (US Patent App. 19/637,714).
JavaScript · HTML★ 0↓ 4,326/moJul 23, 2026
Custom licenseJul 23, 2026 · metrics 1.13.0