Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
48,611
Monthly downloads under inspection
390B
Median health index
57 Moderate
48,611 recordsRanked by popularity · browse by tag · record statistics
npm
52Moderatehealth index
metabase/representations
The Metabase Representation Format: a human-readable, version-controllable YAML tree for Metabase user content. Spec, JSON Schemas, and examples.
TypeScript · JavaScript★ 8↓ 3,180/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mezzio/mezzio-authorization-rbac
RBAC permission adapter for mezzio-authorization
PHP★ 8↓ 5,605/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mezzio/mezzio-csrf
CSRF token generation and validation for PSR-7 and PSR-15 applications using mezzio-session
PHP★ 8↓ 7,192/moJul 24, 2026
BSD-3-ClauseJul 24, 2026 · metrics 1.13.0
Packagist
34At riskhealth index
mezzio/mezzio-flash
Flash messages for PSR-7 and PSR-15 applications using mezzio-session
PHP★ 8↓ 17.6K/moJul 25, 2026
BSD-3-ClauseJul 25, 2026 · metrics 1.13.0
Packagist
73Goodhealth index
mezzio/mezzio-session-ext
ext-session persistence adapter for mezzio-session
PHP★ 8↓ 15.7K/moJul 25, 2026
BSD-3-ClauseJul 25, 2026 · metrics 1.13.0
crates.io
40At riskhealth index
mikelodder7/bls12_381_plus
Implementation of the BLS12-381 pairing-friendly elliptic curve group
Rust★ 8↓ 45.7K/moJul 14, 2026
No licenseJul 14, 2026 · metrics 1.13.0
33At riskhealth index
minitest/minitest-mock
No repository description published.
Ruby★ 8Jul 18, 2026
No licenseJul 18, 2026 · metrics 1.13.0
npm
52Moderatehealth index
minorg/shaclmate
Generate TypeScript from SHACL shapes
TypeScript★ 8Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
Go
52Moderatehealth index
mistergamarra/pgcloner
Interactive Go CLI for pulling PostgreSQL dumps from remote databases via Teleport and restoring them into isolated local Docker containers
Go★ 8Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go · npm
72Goodhealth index
mitodl/ocw-hugo-themes
A Hugo theme for building OCW websites
TypeScript · HTML · SCSS★ 8Jul 18, 2026
BSD-3-ClauseJul 18, 2026 · metrics 1.13.0
npm
74Goodhealth index
mittwald/cli
The mittwald command-line interface
TypeScript★ 8↓ 2,652/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
39At riskhealth index
mobstac/mobstac-awesome-qr
An awesome QR code generator written in Typescript.
TypeScript★ 8↓ 5,087/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Packagist
62Moderatehealth index
mollie/magento2-hyva-compatibility
No repository description published.
HTML · TypeScript★ 8↓ 83.2K/moJul 31, 2026
No licenseJul 31, 2026 · metrics 1.13.0
PyPI · crates.io · Maven +2
62Moderatehealth index
momentohq/client-protos
Official protobuf type definitions for Momento Serverless Cache
Shell · Rust★ 8↓ 14.5K/moJul 30, 2026
Apache-2.0Jul 30, 2026 · metrics 1.13.0
Go
54Moderatehealth index
monitoring-forge/check_http2
Nagios check_http plugin alternative powered by Go
Go★ 8Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go · npm
46At riskhealth index
mwgg/LibrePing
Open-source, decentralized uptime monitoring — from everywhere, owned by no one.
Go · TypeScript★ 8Aug 1, 2026
AGPL-3.0Aug 1, 2026 · metrics 1.13.0
31At riskhealth index
mws-cloud-platform/api
MWS Cloud OpenAPI
Mixed★ 8Jul 28, 2026
Custom licenseJul 28, 2026 · metrics 1.13.0
npm
60Moderatehealth index
mybigday/whisper.node
An another Node binding of whisper.cpp to make same API with whisper.rn as much as possible.
C++ · JavaScript · C★ 8↓ 43.9K/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
PyPI · npm
72Goodhealth index
n24q02m/mnemo-mcp
Persistent AI memory with hybrid search and embedded sync. Open, free, unlimited.
Python★ 8Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
PyPI
39At riskhealth index
naimetti/rfc3339-validator
A pure python RFC3339 validator
Python · Makefile★ 8Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
crates.io
27Criticalhealth index
namada-net/sparse-merkle-tree
An optimized sparse merkle tree.
Rust★ 8Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm · Go
62Moderatehealth index
nano-step/nano-brain
Persistent memory & code intelligence server for AI coding agents. Deploy on VPS for shared memory across machines. Hybrid search (BM25 + pgvector), knowledge graph, impact analysis. 14 MCP tools. Works with Claude Code, OpenCode, Cursor, and any MCP client.
Go★ 8↓ 27.7K/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Packagist
54Moderatehealth index
neos/fluidadaptor
[READ-ONLY] A package split from Flow containing our Fluid adaptor
PHP★ 8↓ 54.9K/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
Go · npm
46At riskhealth index
nerveband/ai-happy-design
Figma CLI/MCP but fast — design with AI agents
Go · TypeScript★ 8Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
49At riskhealth index
nervebing/javdbapi
No repository description published.
Go★ 8Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Hex
48At riskhealth index
nerves-hub/atecc508a
Elixir interface for the ATECC508/ATECC608 security chips
Elixir★ 8↓ 3,895/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Hex
63Moderatehealth index
nerves-project/nerves_motd
Message of the Day for Nerves devices
Elixir★ 8↓ 5,560/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
npm
52Moderatehealth index
netlify/plugin-csp-nonce
Build plugin to use a nonce for the script-src directive of your site's Content Security Policy.
HTML★ 8↓ 26.3K/moJul 19, 2026
No licenseJul 19, 2026 · metrics 1.13.0