Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
44,062
Monthly downloads under inspection
386B
Median health index
57 Moderate
12,196 recordsRanked by popularity · browse by tag · record statistics
npm
58Moderatehealth index
step-security/unity-builder
Build Unity projects for different platforms. Secure drop-in replacement for game-ci/unity-builder.
TypeScript★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
crates.io
21Criticalhealth index
stepancheg/bytes
Utilities for working with bytes
Rust★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
28Criticalhealth index
stephenfin/gophercloud
Gophercloud: an OpenStack SDK for Go
Go★ 0Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
Go
66Moderatehealth index
stephrobert/scankit
Shared Go library: terminal presentation, SARIF, findings and A-E scoring for security tooling
Go★ 0Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
Go · npm
57Moderatehealth index
stevenzg/tarjan
Spin up a complete local dev environment for a whole product from one config file — clone repos, start services in dependency order, stream logs, tear down cleanly. A single static Go binary.
Go★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
crates.io
47At riskhealth index
stlankes/kernel
libhermit-rs: A Rust-based library operting system
Rust★ 0↓ 8/moJul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
Go
45At riskhealth index
stn81/kate
No repository description published.
Go★ 0Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 1.13.0
PyPI
36At riskhealth index
strandgren/satpy
Python package for earth-observing satellite data processing
Python★ 0Jul 26, 2026
GPL-3.0Jul 26, 2026 · metrics 1.13.0
Go
53Moderatehealth index
strongo/dsstore
DSStore file reader & writer
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go · npm
40At riskhealth index
subhashraveendran/aero-shutter
aero-shutter — fast Wi-Fi photo importer TUI for the Nikon D5300 (PTP/IP), built with Go + Bubble Tea
Go · TypeScript★ 0Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
NuGet
48At riskhealth index
sufficit/sufficit-client
No repository description published.
C#★ 0Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
npm
28Criticalhealth index
suneettipirneni/discord-api-types
Up to date Discord API Typings, versioned by the API version
TypeScript★ 0Jul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go · npm
48At riskhealth index
sunnchao/sub2api
No repository description published.
Go · Vue★ 0Jul 26, 2026
LGPL-3.0Jul 26, 2026 · metrics 1.13.0
Go
41At riskhealth index
supercakecrumb/engram
No repository description published.
Go★ 0Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
61Moderatehealth index
superhumaan/DNA
Open-source delivery platform for TypeScript teams — feature factory, quality gates, CI/GitHub push, 768-pack marketplace, compliance, runtime observer, and AI repair.
TypeScript★ 0↓ 6,547/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
31At riskhealth index
superhx/rocketmq-client-go
Apache RocketMQ go client
Go★ 0Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm
37At riskhealth index
svetlanabrennan/opentelemetry-js
OpenTelemetry JavaScript Client
TypeScript★ 0↓ 32K/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
59Moderatehealth index
swanchain/computing-provider
Turn your GPU into an AI inference endpoint on the Swan Chain network. Connects outbound over WebSocket, serves local SGLang/vLLM/Ollama models — no inbound ports, no wallet required.
Go · TypeScript★ 0Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
43At riskhealth index
syi-stackure/sdk-go
No repository description published.
Go★ 0Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go · PyPI
44At riskhealth index
sylvanld/go-flexconf
Flexible sdk for config management in go apps
Go★ 0Jul 28, 2026
No licenseJul 28, 2026 · metrics 1.13.0
npm
45At riskhealth index
symbiosis-finance/sdk-types
No repository description published.
TypeScript★ 0↓ 2,562/moJul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
Go
56Moderatehealth index
syniol/xyo-sdk-go
an Official XYO Financial SDK for Go (Golang)
Go★ 0Jul 22, 2026
BSD-3-ClauseJul 22, 2026 · metrics 1.13.0
Packagist
58Moderatehealth index
syniol/xyo-sdk-php
an Official XYO Financial SDK for PHP
PHP★ 0↓ 7/moJul 26, 2026
BSD-3-ClauseJul 26, 2026 · metrics 1.13.0
Go
35At riskhealth index
syswraith/heimdall
Fast, concurrent username OSINT tool in Go — checks presence across sites via HTTP, JSON, headless browser, and OpenGraph parsing, with SQLite caching and YAML-driven site configs.
Go★ 0Jul 24, 2026
AGPL-3.0Jul 24, 2026 · metrics 1.13.0
Go
48At riskhealth index
t-beigbeder/vdasync
Versatile data access and synchronization tool
Go★ 0Jul 25, 2026
Custom licenseJul 25, 2026 · metrics 1.13.0