Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
46,942
Monthly downloads under inspection
389B
Median health index
57 Moderate
46,942 recordsRanked by popularity · browse by tag · record statistics
npm
65Moderatehealth index
christophehurpeau/pob
library generator/tools/scripts
JavaScript · TypeScript★ 4Jul 19, 2026
ISCJul 19, 2026 · metrics 1.13.0
crates.io
41At riskhealth index
ciresnave/baracuda
CUDA ecosystem wrappers for Rust
Rust★ 4↓ 77/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
Go
49At riskhealth index
civet148/sqlca
a golang database orm tool based on sqlx
Go★ 4Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
RubyGems
40At riskhealth index
claricle/emf2svg-ruby
EMF to SVG conversion in Ruby: emf2svg Ruby gem
Ruby★ 4Jul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
npm
58Moderatehealth index
cliwant/mcp-sam-gov
Keyless-first MCP server — 150 tools for US federal + state/local (SLED) government contracting, spending, regulation & partner vetting. SAM.gov, USAspending, Grants.gov, OFAC, FDIC, EPA, CourtListener + 45 more. No API key. Honesty-hardened.
JavaScript · TypeScript★ 4↓ 2,461/moJul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
Go
62Moderatehealth index
cloud-barista/cm-ant
Perform verification on performance, price and cost when before and after migration to the cloud
Go★ 4↓ 0/moJul 13, 2026
Apache-2.0Jul 13, 2026 · metrics 1.13.0
Go
61Moderatehealth index
cloudfoundry/certsplitter
No repository description published.
Go · Shell★ 4Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Go
71Goodhealth index
cloudfoundry/conda-cnb
No repository description published.
Go · Shell★ 4Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
Go
63Moderatehealth index
cloudfoundry/eventhub
No repository description published.
Go · Shell★ 4Jul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
Go
56Moderatehealth index
cloudscalerio/cloudscaler
No repository description published.
Go★ 4Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
61Moderatehealth index
cloudsmith-io/cloudsmith-api-go
API bindings for the Cloudsmith API in Go
Mustache · Shell★ 4Jul 25, 2026
Apache-2.0Jul 25, 2026 · metrics 1.13.0
PyPI
35At riskhealth index
cmorisse/ikp3db
IKPdb for CPython 3.x
Python★ 4↓ 765/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Packagist
59Moderatehealth index
cobwebch/svconnector
No repository description published.
PHP · Shell★ 4↓ 9,769/moJul 26, 2026
Custom licenseJul 26, 2026 · metrics 1.13.0
crates.io
50Moderatehealth index
coconut-svsm/cocoon-tpm
No repository description published.
Rust★ 4↓ 7,003/moJul 14, 2026
Apache-2.0Jul 14, 2026 · metrics 1.13.0
npm
38At riskhealth index
codewithnuh/blockend
CLI tool that generates production-ready backend blocks — rate limiting, logging, validation, error handling and much more — directly into your codebase. No runtime dependency. You own the code.
TypeScript · MDX★ 4↓ 260/moJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Maven
56Moderatehealth index
codion-is/codion
Codion Application Framework
Java★ 4Jul 15, 2026
GPL-3.0Jul 15, 2026 · metrics 1.13.0
Go
60Moderatehealth index
coffeemuse/tn3270proxy
A TN3270 gateway
Go★ 4Jul 27, 2026
GPL-3.0Jul 27, 2026 · metrics 1.13.0
—
39At riskhealth index
cogini/opentelemetry_xray
OpenTelemetry AWS X-Ray for Erlang
Erlang★ 4Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
npm
38At riskhealth index
coinflow-labs-us/coinflow-react
No repository description published.
TypeScript★ 4↓ 31.7K/moJul 14, 2026
No licenseJul 14, 2026 · metrics 1.13.0
Go
30At riskhealth index
colduction/boundedpool-go
A high-performance, thread-safe, bounded object pool implementation for Go, designed as a flexible alternative to "sync.Pool"
Go★ 4Jul 15, 2026
LGPL-2.1Jul 15, 2026 · metrics 1.13.0
Go · npm
42At riskhealth index
commitdev/zero-backend-go
A zero module containing a backend that can be deployed to the infrastructure set up using zero-aws-eks-stack
Go · Shell · JavaScript★ 4Jul 20, 2026
Apache-2.0Jul 20, 2026 · metrics 1.13.0
npm
62Moderatehealth index
conciv-dev/conciv
An embeddable AI dev agent for your running app — chat, page control, and live tests, injected into the page via a Vite plugin.
TypeScript★ 4↓ 2,098/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
56Moderatehealth index
containeroo/thor
Simple application that checks if a specified TCP, HTTP or ICMP target is available.
Go★ 4Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
Go
54Moderatehealth index
containifyci/dunebot
DuneBot Github Application to automatically review and merge Pull Requests
Go★ 4Jul 15, 2026
No licenseJul 15, 2026 · metrics 1.13.0
Packagist
52Moderatehealth index
contao/calendar-bundle
[READ-ONLY] Contao Calendar Bundle
PHP★ 4↓ 11.9K/moJul 13, 2026
LGPL-3.0Jul 13, 2026 · metrics 1.13.0
npm
61Moderatehealth index
contember/lopata
Drop-in replacement for wrangler dev and @cloudflare/vite-plugin, powered by Bun.
TypeScript★ 4↓ 5,645/moJul 18, 2026
MITJul 18, 2026 · metrics 1.13.0