Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
48,389
Monthly downloads under inspection
390B
Median health index
57 Moderate
48,389 recordsRanked by popularity · browse by tag · record statistics
Maven · npm
72Goodhealth index
atomicfi/atomic-transact-react-native
No repository description published.
TypeScript★ 7↓ 38.4K/moJul 14, 2026
Custom licenseJul 14, 2026 · metrics 1.13.0
Go · PyPI
72Goodhealth index
attune-io/attune
Safe, in-place Kubernetes pod resource right-sizing. VPA done right.
Go★ 7Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
npm
59Moderatehealth index
auth0/auth0-actions
No repository description published.
JavaScript★ 7↓ 111K/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
npm
66Moderatehealth index
auth0/auth0-fastify
Mono Repo, containing SDKs for implementing user authentication and protecting API's in Fastify applications.
TypeScript★ 7↓ 0/moJul 14, 2026
No licenseJul 14, 2026 · metrics 1.13.0
npm
17Criticalhealth index
avajs/ava-files
DEPRECATED
JavaScript★ 7↓ 24K/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
PyPI
38At riskhealth index
avallbona/pytest-checkipdb
Plugin to check if there are ipdb/pdb breakpoints left into our code
Python★ 7Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
crates.io · Maven
70Goodhealth index
awslabs/aurora-dsql-tools
No repository description published.
Rust★ 7↓ 17.6K/moJul 21, 2026
MIT-0Jul 21, 2026 · metrics 1.13.0
crates.io
45At riskhealth index
axiom-crypto/halo2curves
No repository description published.
Rust★ 7↓ 34.3K/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
npm · crates.io
61Moderatehealth index
babblevoice/projectrtp
No repository description published.
Rust · JavaScript★ 7↓ 2,982/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm
68Moderatehealth index
bakissation/mcp-google-multi
Multi-account Google MCP server for Claude Code: Gmail, Drive, Calendar, Sheets, Docs, Contacts, Search Console, and more. ~871 tools with OAuth2 multi-account switching.
TypeScript★ 7↓ 2,559/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
npm · PyPI
59Moderatehealth index
balena-io-modules/mountutils
Cross platform mount related utilities
C++ · JavaScript★ 7↓ 22.5K/moJul 15, 2026
No licenseJul 15, 2026 · metrics 1.13.0
PyPI
66Moderatehealth index
bbalouki/itchcpp
High-Performance NASDAQ TotalView-ITCH 5.0 Parser & Market-Data Platform
C++★ 7Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
PyPI
54Moderatehealth index
bbstats/chimeraboost
A Python-backend gradient boosting library
Python★ 7↓ 2,036/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Hex
34At riskhealth index
bennyhat/xml_json
Should you convert XML to JSON? Probably not. If you have to though, try a convention based converter.
Elixir★ 7↓ 8,493/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Packagist · npm
65Moderatehealth index
binarybuilds/filament-failed-jobs
A filament plugin to easily retry and prune failed jobs
PHP★ 7↓ 3,460/moJul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
PyPI
40At riskhealth index
bioexcel/biobb_md
Biobb_md is the Biobb module collection to perform molecular dynamics simulations.
Python★ 7↓ 417/moJul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
RubyGems
48At riskhealth index
bkuhlmann/ghub
A monadic GitHub API client.
Ruby★ 7Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
crates.io
52Moderatehealth index
blinkingbit-oss/execkit
Stateful, structured, safe command execution for AI agents - over local shells, SSH, and Docker.
Rust · HTML★ 7Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
48At riskhealth index
blues/note-go
Go API for Notecard
Go★ 7Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
Hex
30At riskhealth index
bluzky/tw_merge
Utilities to merge tailwindcss classes
Elixir★ 7↓ 10.7K/moJul 17, 2026
No licenseJul 17, 2026 · metrics 1.13.0
Go
54Moderatehealth index
borisdali/helpdesk
aiHelpDesk: Agentic DB SRE support system that learns from every incident. A database reasoning layer equipped with a governed actuation arm that treats human operators and upstream agents indiscriminately
Go★ 7Jul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0
—
62Moderatehealth index
boschglobal/dse.modelc
Model C Library of the Dynamic Simulation Environment Core Platform.
C · Go★ 7Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
Go
57Moderatehealth index
bots-go-framework/bots-api-telegram
Go library for Telegram Messenger Bot API used by https://github.com/bots-go-framework
Go★ 7Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
Go
52Moderatehealth index
bugsyhewitt/possession
Possession takes a valid authenticated request and wears its skin under other identities, roles, stripped auth, and corrupted tokens to see what still opens. It exposes weak access control—dragging IDORs, privilege escalation, and auth bypasses out of the dark.
Go★ 7Jul 28, 2026
AGPL-3.0Jul 28, 2026 · metrics 1.13.0