Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
47,370
Monthly downloads under inspection
389B
Median health index
57 Moderate
47,370 recordsRanked by popularity · browse by tag · record statistics
npm
66Moderatehealth index
extend-hq/extend-typescript-sdk
An SDK to use the extend.ai API
TypeScript★ 5↓ 254.3K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
61Moderatehealth index
ezoidc/ezoidc
Policy-based access control for environment variables using federated identities
Go★ 5Jul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
—
56Moderatehealth index
fabasoad/setup-brainfuck-action
This GitHub action installs brainfuck compiler.
Shell★ 5Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
Go
63Moderatehealth index
fabianschurig/bitbucket-cli
This provides a go bitbucket cli bb-cli, an mcp server bb-mcp and a terraform provider. All by focusing on low maintenance using auto generation from the official OpenAPI Spec.
Go★ 5↓ 0/moJul 14, 2026
AGPL-3.0Jul 14, 2026 · metrics 1.13.0
Packagist
62Moderatehealth index
facile-it/php-jose-verifier
JOSE JWT verifiers for OAuth2 and OpenID tokens
PHP★ 5↓ 29.3K/moJul 30, 2026
No licenseJul 30, 2026 · metrics 1.13.0
Go
50Moderatehealth index
fatkulnurk/duitku-go
Duitku.com Payment Gateway SDK for Golang — built with only Go’s standard library.
Go★ 5Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI · crates.io
56Moderatehealth index
fetter-io/fetter-py
System-wide Python package discovery, validation, and allow-listing
Python · Rust★ 5↓ 10.4K/moJul 28, 2026
GPL-3.0Jul 28, 2026 · metrics 1.13.0
Hex
49At riskhealth index
fhunleth/tablet
A tiny tabular data renderer
Elixir★ 5↓ 9,537/moJul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
npm
59Moderatehealth index
fiale-plus/pi-rogue
Pi-Rogue opinionated Pi extensions repo. Helpful and lightweight. Also just a pie.
TypeScript★ 5↓ 4,583/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
53Moderatehealth index
flagright/flagright-go
The Flagright Go library provides access to the Flagright API from Golang.
Go★ 5Jul 21, 2026
No licenseJul 21, 2026 · metrics 1.13.0
npm
63Moderatehealth index
fleetbase/iam-engine
Identity and Authentication Management Engine for Fleetbase
JavaScript · Handlebars★ 5↓ 2,109/moJul 22, 2026
AGPL-3.0Jul 22, 2026 · metrics 1.13.0
Packagist
61Moderatehealth index
flow-php/etl-adapter-csv
PHP ETL Adapter: CSV
PHP★ 5↓ 8,286/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go · npm
48At riskhealth index
folsomintel/fuse
Agent sandboxing
Go · Python★ 5↓ 0/moJul 14, 2026
MITJul 14, 2026 · metrics 1.13.0
Go
64Moderatehealth index
forge-cms/forge
Content backend with typed lifecycle enforcement, MCP-native API, and zero runtime dependencies. Self-hosted. Open source.
Go★ 5Jul 16, 2026
AGPL-3.0Jul 16, 2026 · metrics 1.13.0
Go
51Moderatehealth index
fortio/tcolor
Terminal (TUI) color picker
Go★ 5↓ 0/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Packagist
44At riskhealth index
franzholz/static_info_tables_de
German language pack for the TYPO3 Extension static_info_tables
PHP★ 5↓ 17.9K/moJul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
npm · Packagist
53Moderatehealth index
froala/wysiwyg-editor
The next generation Javascript WYSIWYG HTML Editor.
CSS · HTML★ 5↓ 1.4M/moJul 14, 2026
Custom licenseJul 14, 2026 · metrics 1.13.0
npm
63Moderatehealth index
frontegg/frontegg-angular
No repository description published.
TypeScript★ 5Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
24Criticalhealth index
g14a/cli
GitHub’s official command line tool
Go★ 5Jul 31, 2026
MITJul 31, 2026 · metrics 1.13.0
Go
75Goodhealth index
gardener/gardener-extension-runtime-gvisor
Gardener extension controller for the gVisor container runtime sandbox (https://gvisor.dev).
Go · Shell★ 5Jul 18, 2026
Apache-2.0Jul 18, 2026 · metrics 1.13.0
npm
46At riskhealth index
gavin-lb/vue3-flag-icons
A TypeScript-compatible Vue3 component library for providing flag icons.
TypeScript★ 5↓ 4,670/moJul 30, 2026
MITJul 30, 2026 · metrics 1.13.0
npm
60Moderatehealth index
geoql/doctor
Your agent writes bad Vue/Nuxt. This catches it. — A pair of CLIs and oxlint plugins that audit Vue 3 + Nuxt 4 apps for performance, correctness, security, and AI-agent anti-patterns.
TypeScript★ 5Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
69Moderatehealth index
getporter/azure-plugins
Azure plugins for Porter
Go★ 5Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
npm
67Moderatehealth index
getsoren/design-system
Soren Design System
TypeScript★ 5↓ 4,348/moJul 15, 2026
ISCJul 15, 2026 · metrics 1.13.0
PyPI · npm
59Moderatehealth index
ginkida/sallyport
A security-first bridge between Claude Code (MCP) and Chrome — HMAC pairing, domain allowlist, per-domain evaluate opt-in.
TypeScript · Python★ 5↓ 2,291/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
NuGet
38At riskhealth index
girvs/Girvs
No repository description published.
C#★ 5Jul 23, 2026
Apache-2.0Jul 23, 2026 · metrics 1.13.0
npm
47At riskhealth index
gitbutlerapp/design-core
The place where we generate design tokens for the app
CSS · Svelte · JavaScript★ 5Jul 26, 2026
No licenseJul 26, 2026 · metrics 1.13.0