Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
54,348
Monthly downloads under inspection
404B
Median health index
59 Moderate
54,348 recordsRanked by popularity · browse by tag · record statistics
Go · Maven
78Goodhealth index
palantir/go-java-launcher
A simple Go program for launching Java programs from a fixed configuration. This program replaces Gradle-generated Bash launch scripts which are susceptible to attacks via injection of environment variables of the form JAVA_OPTS='$(rm -rf /)'.
Go · Shell★ 75↓ 0/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 2.5.0
Packagist
54Moderatehealth index
pear/Archive_Tar
No repository description published.
PHP★ 75↓ 1.7M/moAug 4, 2026
No licenseAug 4, 2026 · metrics 2.5.0
—
65Goodhealth index
pixl8/Preside-CMS
The Preside Platform is an open source application development platform for the Lucee language that provides content management, rapid admin application development, rules engine, email templating, and much much more.
ColdFusion · JavaScript★ 75Jul 15, 2026
GPL-2.0Jul 15, 2026 · metrics 2.5.0
Packagist
27At Riskhealth index
probots-io/pinecone-php
A beautiful, extendable PHP Package to communicate with your pinecone.io indices, collections and vectors.
PHP★ 75↓ 13.4K/moJul 23, 2026
MITJul 23, 2026 · metrics 2.5.0
Maven
80Excellenthealth index
queritylib/querity
Open-source Java query builder for SQL and NoSQL
Java★ 75Jul 24, 2026
Apache-2.0Jul 24, 2026 · metrics 2.5.0
RubyGems
45Weakhealth index
rack/rackup
No repository description published.
Ruby★ 75Jul 17, 2026
MITJul 17, 2026 · metrics 2.5.0
crates.io
84Excellenthealth index
realmorrisliu/openrouter-rs
A type-safe OpenRouter Rust SDK.
Rust★ 75↓ 2,664/moJul 17, 2026
MITJul 17, 2026 · metrics 2.5.0
RubyGems
71Goodhealth index
ruby/securerandom
Interface for secure random number generator
Ruby★ 75Jul 16, 2026
Custom licenseJul 16, 2026 · metrics 2.5.0
Packagist
84Excellenthealth index
sanmai/pipeline
Build streaming pipelines in PHP. The missing pipe operator. General-purpose collections pipeline. Since 2017.
PHP★ 75↓ 1.1M/moJul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 2.5.0
npm
75Goodhealth index
scaccogatto/vue-viewports
Named responsive breakpoints for Vue 3 — plugin + useViewport() composable, matchMedia-based, TypeScript
TypeScript★ 75↓ 1,048/moJul 22, 2026
MITJul 22, 2026 · metrics 2.5.0
RubyGems
50Moderatehealth index
setdef/RatatuiRuby
💎 Unofficial Ruby wrapper for Ratatui 👨‍🍳🐀.
Ruby · Rust★ 75Jul 20, 2026
Custom licenseJul 20, 2026 · metrics 2.5.0
npm
65Goodhealth index
silvenon/remark-smartypants
remark plugin to implement SmartyPants
TypeScript★ 75↓ 15M/moAug 3, 2026
MITAug 3, 2026 · metrics 2.5.0
Go
67Goodhealth index
spiffe/sidecar
The SPIFFE Helper is a tool that can be used to retrieve and manage SVIDs on behalf of a workload
Go★ 75Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 2.5.0
Go · npm
53Moderatehealth index
volcengine/mediakit-cli
No repository description published.
Go★ 75↓ 2,781/moJul 13, 2026
MITJul 13, 2026 · metrics 2.5.0
npm
73Goodhealth index
yuhp/opencode-models-discovery
A universal OpenCode plugin for dynamic model discovery with flexible configuration for OpenAI-compatible providers.
TypeScript★ 75↓ 15.9K/moJul 15, 2026
MITJul 15, 2026 · metrics 2.5.0
npm · Maven
84Excellenthealth index
Cap-go/capacitor-native-audio
Capacitor plugin for native audio engine.
Java · Swift · TypeScript★ 74↓ 19.3K/moJul 18, 2026
MPL-2.0Jul 18, 2026 · metrics 2.5.0
crates.io · npm · PyPI
87Excellenthealth index
Chia-Network/clvm_rs
Rust implementation of clvm
Rust · Python★ 74↓ 26K/moJul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 2.5.0
npm
62Moderatehealth index
DefiLlama/defillama-sdk
SDK for defillama adapters
TypeScript★ 74↓ 18.7K/moAug 2, 2026
AGPL-3.0Aug 2, 2026 · metrics 2.5.0
npm
60Moderatehealth index
DemonMartin/tlsClient
A wrapper for bogdanfinn/tls-client based on koffi for unparalleled performance and usability. Inspired by @dryft/tlsclient.
TypeScript★ 74↓ 13.5K/moJul 27, 2026
No licenseJul 27, 2026 · metrics 2.5.0
Go
16Criticalhealth index
Duck8823/duci
The simple ci server
Go★ 74Jul 17, 2026
MITJul 17, 2026 · metrics 2.5.0
npm · Go
87Excellenthealth index
Infisical/cli
The official CLI of Infisical
Go★ 74↓ 421.2K/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 2.5.0
—
62Moderatehealth index
JuliaDiff/DiffRules.jl
A simple shared suite of common derivative definitions
Julia★ 74Jul 26, 2026
Custom licenseJul 26, 2026 · metrics 2.5.0
npm
89Excellenthealth index
LedgerHQ/wallet-api
Wallet API Monorepo
TypeScript · MDX★ 74↓ 480.8K/moJul 26, 2026
No licenseJul 26, 2026 · metrics 2.5.0
PyPI
86Excellenthealth index
MakazhanAlpamys/Soup
Soup turns the pain of LLM fine-tuning into a simple workflow. One config, one command, done.
Python★ 74Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 2.5.0
npm
65Goodhealth index
OperationalFallacy/biome-effect-linting-rules
This is a collection of opinionated linting rules (in Biomejs) for Effect-ts projects
TypeScript · JavaScript★ 74↓ 7,682/moJul 23, 2026
MITJul 23, 2026 · metrics 2.5.0
NuGet
60Moderatehealth index
Tyrrrz/PolyShim
Collection of polyfills for projects targeting older versions of .NET
C#★ 74Jul 18, 2026
MITJul 18, 2026 · metrics 2.5.0
PyPI
75Goodhealth index
adamchainz/flake8-tidy-imports
❄️ A flake8 plugin that helps you write tidier imports.
Python★ 74Aug 3, 2026
MITAug 3, 2026 · metrics 2.5.0
—
62Moderatehealth index
alarm-redist/redist
Simulation methods for legislative redistricting.
C++★ 74↓ 0/moJul 14, 2026
GPL-2.0Jul 14, 2026 · metrics 2.5.0