Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
47,612
Monthly downloads under inspection
390B
Median health index
57 Moderate
47,612 recordsRanked by popularity · browse by tag · record statistics
—
45At riskhealth index
sophgo/opensbi
RISC-V Open Source Supervisor Binary Interface
C · Python★ 6Jul 18, 2026
Custom licenseJul 18, 2026 · metrics 1.13.0
npm
68Moderatehealth index
specmatic/specmatic-node
Node wrapper for Specmatic
TypeScript★ 6↓ 75.9K/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
62Moderatehealth index
spiffe/spire-identity-exchange
Development project for a set of SPIRE extensions to support identity exchange
Go★ 6Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Packagist
54Moderatehealth index
spiral/security
[READ ONLY] RBAC security layer based on NIST definition, role/rule/permission associations, bulletproof. Subtree split of the Spiral Security component (see spiral/framework)
PHP★ 6↓ 380.5K/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
Go · npm
60Moderatehealth index
spxrogers/agentsync
Sync AI coding-agent configs (Claude Code, OpenCode, Codex, and more) from one canonical, committable source.
Go★ 6Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
Go
56Moderatehealth index
square/exoskeleton
No repository description published.
Go★ 6Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0
npm
62Moderatehealth index
stacksjs/ts-validation
Lightweight & performant form & request data validation library.
TypeScript★ 6↓ 23.4K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
RubyGems
42At riskhealth index
standardrb/standardrb-alias-gem
You're probably in the wrong place. This is an alias for the gem standard, whose binary is standardrb
Ruby · Shell★ 6Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
54Moderatehealth index
stevekinney/cinder
A design system—because we don't have enough already.
TypeScript · Svelte★ 6Jul 17, 2026
No licenseJul 17, 2026 · metrics 1.13.0
Packagist
57Moderatehealth index
storyblok/php-tiptap-extension
Storyblok richtext renderer for Symfony, built on top of Tiptap editor
PHP★ 6↓ 16.2K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
62Moderatehealth index
strangebeecorp/thehivemcp
TheHive official MCP server
Go★ 6Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
PyPI
24Criticalhealth index
structuralbioinformatics/sbilib
a handle for protein modelling and engineering
Python · Jupyter Notebook★ 6Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
crates.io
61Moderatehealth index
structured-world/structured-zstd
Pure Rust zstd implementation (fork of ruzstd). Dictionary compression, no FFI. For coordinode-lsm-tree and CoordiNode.
Rust★ 6↓ 2,712/moJul 13, 2026
Apache-2.0Jul 13, 2026 · metrics 1.13.0
npm
53Moderatehealth index
sudoeren/arhus
local-first security analysis for TypeScript & JavaScript
TypeScript★ 6↓ 2,972/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Packagist
67Moderatehealth index
sulu/SuluPHPCRMigrationBundle
Migrate Sulu content from PHPCR to SuluContentBundle
PHP★ 6↓ 2,357/moJul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
npm
47At riskhealth index
superfluid-org/tokenlist
A Superfluid TokenList builder for https://tokenlists.org/
TypeScript★ 6↓ 7,629/moJul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
npm
67Moderatehealth index
sushi-labs/sushi
Sushi library
TypeScript · MDX★ 6↓ 46.6K/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
npm
71Goodhealth index
sverweij/watskeburt
get changed files & their statuses since any git revision
TypeScript · JavaScript★ 6↓ 10.7M/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Packagist
48At riskhealth index
symfony/polyfill-php86
Symfony polyfill backporting some PHP 8.6+ features to lower PHP versions
PHP★ 6↓ 5.7M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
Go
58Moderatehealth index
synqronlabs/raven
ESMTP toolkit in go
Go★ 6Jul 29, 2026
MITJul 29, 2026 · metrics 1.13.0
npm
46At riskhealth index
syntax-tree/unist-util-stringify-position
utility to serialize a node, position, or point as a human readable location
JavaScript★ 6↓ 198M/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
35At riskhealth index
taisei-project/python-zipfile-zstd
Monkey patch the standard zipfile module to enable Zstandard support
Python★ 6Jul 21, 2026
MITJul 21, 2026 · metrics 1.13.0
npm · Packagist
57Moderatehealth index
tastyigniter/ti-theme-orange
Responsive theme for TastyIgniter front-end, customizable, simple, and readable
PHP★ 6↓ 2,044/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
Packagist
63Moderatehealth index
tecnickcom/tc-lib-pdf-filter
PHP library to decode PDF compression and encryption filters
PHP★ 6↓ 44.6K/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Packagist
64Moderatehealth index
tecnickcom/tc-lib-pdf-image
PHP library containing PDF Image methods
PHP★ 6↓ 51.8K/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go · npm
74Goodhealth index
telekom/controlplane
⚠️ Disclaimer: This is a beta version!
Go★ 6Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
—
24Criticalhealth index
themewagon/FoodMart
Free Bootstrap 5 eCom Website Template
HTML★ 6Jul 15, 2026
No licenseJul 15, 2026 · metrics 1.13.0
Go
60Moderatehealth index
thomas-vilte/dave-go
Bring Discord DAVE end-to-end encryption to Go with a native, godave-compatible implementation.
Go★ 6Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0