Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
83,214
Monthly downloads under inspection
636B
Median health index
59 Moderate
18,909 recordsRanked by popularity · browse by tag · record statistics
Go
27At Riskhealth index
kaleb110/pkgmod
auto download uninstalled dependancies for typescript projects
Go★ 1Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
Go
33At Riskhealth index
kanocz/hutil
Some utils for my go/http (sleepy) APIs
Go★ 1Sep 17, 2026
GPL-3.0Sep 17, 2026 · metrics 2.10.0
Go · npm · PyPI
51Moderatehealth index
kargovin/scrapeflow
No repository description published.
Python★ 1Sep 19, 2026
No licenseSep 19, 2026 · metrics 2.10.0
crates.io
56Moderatehealth index
kaspar030/ld-memory
Rust crate to programmatically create GNU ld MEMORY blocks
Rust★ 1↓ 2,425/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
npm
63Moderatehealth index
kattebak/typespec-zod-emitter
A custom TypeSpec emitter that generates Zod validators for TypeSpec models using the TypeSpec emitter framework.
TypeScript · JavaScript★ 1↓ 27.6K/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
11Criticalhealth index
kazecreator/dsh-settings-pro
No repository description published.
JavaScript★ 1↓ 5,061/moSep 18, 2026
No licenseSep 18, 2026 · metrics 2.10.0
PyPI
77Goodhealth index
keycardai/python-sdk
Keycard Python SDK
Python★ 1Sep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
Go
41Weakhealth index
keytiles/lib-errorhandling-golang
Brings data rich errors which helps to streamline error handling across libs and service internal layers.
Go★ 1Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
67Goodhealth index
kgaughan/gcredstash
gcredstash manages credentials using AWS Key Management Service (KMS) and DynamoDB.
Go★ 1Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
Go
48Weakhealth index
khirotaka/restexec
No repository description published.
TypeScript · Go★ 1Sep 20, 2026
MITSep 20, 2026 · metrics 2.10.0
crates.io
69Goodhealth index
killzoner/clappen
Clap flatten prefix macro
Rust★ 1↓ 65.5K/moSep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
47Weakhealth index
kimaguri/simplx-toolkit
Dev process dashboard TUI — launch, monitor, and manage local dev services
Go · TypeScript★ 1Sep 20, 2026
No licenseSep 20, 2026 · metrics 2.10.0
PyPI · crates.io
60Moderatehealth index
kkollsga/sonagram
Music library → kglite knowledge graph via sonara analysis. Lets AI agents reason over your music and build playlists.
Rust★ 1↓ 4,472/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
32At Riskhealth index
klayrHQ/klayr-sdk
🔩 Klayr software development kit
TypeScript★ 1↓ 1,640/moSep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
56Moderatehealth index
kmmao/happy
Mobile and Web client for Claude Code, with realtime voice, encryption and fully featured
TypeScript★ 1↓ 6,060/moSep 18, 2026
MITSep 18, 2026 · metrics 2.10.0
npm
54Moderatehealth index
kodizm/acp
One Agent Client Protocol surface, three CLI backends. Drive Claude Code, codex, and opencode without backend-specific orchestrator code.
TypeScript★ 1↓ 4,135/moSep 19, 2026
Custom licenseSep 19, 2026 · metrics 2.10.0
Go
77Goodhealth index
kokuwaio/pingdom-exporter
An exporter for Prometheus that collects metrics from Pingdom.
Go★ 1Sep 19, 2026
BSD-2-ClauseSep 19, 2026 · metrics 2.10.0
Go
30At Riskhealth index
kopecmaciej/tview
Terminal UI library with rich, interactive widgets — written in Golang
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go · PyPI
48Weakhealth index
kordloom/loomseal
An open format for evidence someone else can check. One signed, chained, anchored file, verified offline by a free Apache-2.0 tool with no account and no server.
HTML · Go · Python★ 1Sep 20, 2026
Apache-2.0Sep 20, 2026 · metrics 2.10.0
Go
45Weakhealth index
kprompt/kprompt-dash
Simple localhost read-only Kubernetes inventory for kprompt (not a Lens clone)
Go · JavaScript · CSS★ 1Sep 18, 2026
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go
63Moderatehealth index
krakend/krakend-audit
No repository description published.
Go★ 1Sep 19, 2026
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
44Weakhealth index
krauthaufen/wombat.dom
No repository description published.
TypeScript★ 1↓ 981/moSep 17, 2026
MITSep 17, 2026 · metrics 2.10.0
Go
54Moderatehealth index
kriipke/vaultsync
CLI & Golang library for providing a filesystem-based interface for Hashicorp Vault Secrets via YAML files
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Packagist
60Moderatehealth index
kronostechnologies/kronos-csp
A PHP Content-Security-Policy header generator
PHP★ 1↓ 2,624/moSep 19, 2026
MITSep 19, 2026 · metrics 2.10.0
Go
47Weakhealth index
kscarlett/news2
A Go package for calculating National Early Warning Score 2 (NEWS2) based on patient vital signs.
Go★ 1Sep 19, 2026
MITSep 19, 2026 · metrics 2.10.0