Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
↗
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
◇
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
≈
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
45,600
Monthly downloads under inspection
387B
Median health index
57 Moderate
45,600 recordsRanked by popularity · browse by tag · record statistics
Packagist
55Moderatehealth index
Firehed/container
PSR-11 DI Container with autowiring and compilation for PHP
PHP★ 2↓ 144K/moJul 25, 2026
No licenseJul 25, 2026 · metrics 1.13.0
npm
45At riskhealth index
Fl0r14n/ngx-oauth
Angular OAuth 2.1 compliant angular library.
TypeScript★ 2Jul 20, 2026
MITJul 20, 2026 · metrics 1.13.0
npm
35At riskhealth index
FlorisSteenkamp/big-float-ts
Error-free floating point functions (up to under/overflow)
TypeScript★ 2Jul 24, 2026
No licenseJul 24, 2026 · metrics 1.13.0
npm
68Moderatehealth index
FlowFuse/driver-k8s
Kubernetes container driver for FlowFuse
JavaScript★ 2↓ 2,804/moJul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
Go
63Moderatehealth index
ForestEckhardt/source-removal
No repository description published.
Go · Shell★ 2Jul 18, 2026
No licenseJul 18, 2026 · metrics 1.13.0
npm
67Moderatehealth index
FrontFin/mesh-react-native-sdk
No repository description published.
TypeScript★ 2↓ 32.2K/moJul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
56Moderatehealth index
GGEZLabs/ggezchain
GGEZ1 is a blockchain application built using Cosmos SDK and CometBFT.
Go★ 2Jul 29, 2026
Apache-2.0Jul 29, 2026 · metrics 1.13.0
npm
56Moderatehealth index
GMOD/hclust
Hierarchical clustering in javascript
TypeScript · C★ 2↓ 4,862/moJul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
crates.io · Hex · PyPI
61Moderatehealth index
GeiserX/tailscale-rs
A best-effort, pure-Rust port of Tailscale's Go tsnet — embed a Tailscale node directly in your Rust app. Fork of tailscale/tailscale-rs.
Rust★ 2↓ 4,834/moJul 27, 2026
Custom licenseJul 27, 2026 · metrics 1.13.0
PyPI · npm
67Moderatehealth index
Geode-solutions/OpenGeodeWeb-Back
OpenSource Python framework for web microservices
OCaml★ 2↓ 10.7K/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI · npm
64Moderatehealth index
Geode-solutions/OpenGeodeWeb-Viewer
OpenSource Python framework for remote visualisation
Python★ 2↓ 9,492/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
PyPI
68Moderatehealth index
GiacomoSaccaggi/scomp_link
End-to-end ML toolkit automating the complete workflow — data profiling, preprocessing, feature engineering, model selection, training, validation, explainability, drift monitoring, fairness checks, and interactive HTML reporting. Includes a full CLI for zero-code ML pipelines. Python 3.10+.
Python★ 2↓ 2,313/moJul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
npm
57Moderatehealth index
GlobalArtInc/ecosystem
collection of production-ready modules. 50% vibe coded
TypeScript★ 2Jul 19, 2026
MITJul 19, 2026 · metrics 1.13.0
Go
64Moderatehealth index
GoSemantics/semrel
A Go-based semantic release system with plugin architecture and VSC integration
Go★ 2Jul 17, 2026
Custom licenseJul 17, 2026 · metrics 1.13.0
Go
45At riskhealth index
GuechtouliAnis/forge
Forge is a developer workflow wrapper that enforces discipline without taking the wheel. Git discipline, env management, repo scaffolding, built for developers who own their process.
Go★ 2Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
31At riskhealth index
HaakimSec/GoUpload
High-performance file upload vulnerability scanner written in Go
Go★ 2Jul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
npm
39At riskhealth index
Hal-Systems-AU/red-bacnet-public
NodeRED BACnet IP client
JavaScript★ 2↓ 2,017/moJul 19, 2026
Custom licenseJul 19, 2026 · metrics 1.13.0
Go
53Moderatehealth index
HalxDocs/onceo-core
onceo-core — Open-source payment webhook reconciliation for African providers (Paystack, Flutterwave, OPay, M-Pesa). Exactly-once delivery, HMAC verification, idempotent stores.
Go★ 2Jul 15, 2026
MITJul 15, 2026 · metrics 1.13.0
npm
63Moderatehealth index
HarperFast/create-harper
No repository description published.
JavaScript★ 2↓ 4,338/moJul 14, 2026
No licenseJul 14, 2026 · metrics 1.13.0
Go
47At riskhealth index
HazelnutParadise/syralit
A Go-native, Streamlit-inspired framework for data apps, dashboards, and AI tools.
Go · JavaScript★ 2Jul 28, 2026
MITJul 28, 2026 · metrics 1.13.0
npm · Go
62Moderatehealth index
HodeTech/Leakwatch
High-performance open-source secret scanner — detect, verify & report leaked API keys, tokens & credentials in code, Git history, container images, and the cloud.
Go★ 2↓ 46/moJul 27, 2026
MITJul 27, 2026 · metrics 1.13.0
npm
63Moderatehealth index
HominisBrowser/FireForge
CLI tool for creating, building, and maintaining custom Firefox-based browsers
TypeScript★ 2↓ 2,210/moJul 23, 2026
EUPL-1.2Jul 23, 2026 · metrics 1.13.0
Go
57Moderatehealth index
IBM/power-device-plugin
Power Device Plugin to add protected devices into a non-privileged container.
Go★ 2Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 1.13.0
npm · crates.io
63Moderatehealth index
INONONO66/anamnesis
Cognitive graph engine for LLMs — attraction, gravity, perception, forgetting dynamics
Rust · JavaScript★ 2↓ 3,748/moJul 24, 2026
MITJul 24, 2026 · metrics 1.13.0
Go
37At riskhealth index
IQooLogic/obfuscator
encode and decode sensitive information such as passwords to store them in config files
Go★ 2Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
Go
49At riskhealth index
Ibnu-Afdel/pomogo
keyboard-driven Pomodoro timer for Linux terminals.
Go★ 2Jul 22, 2026
MITJul 22, 2026 · metrics 1.13.0
PyPI
44At riskhealth index
Infineon/edgeprotecttools
This comprehensive security software enables provisioning of Cypress/Infineon MCUs, creation and management of cryptographic keys, certificates, and digital signatures for secure authentication and verification.
Python★ 2Jul 22, 2026
Apache-2.0Jul 22, 2026 · metrics 1.13.0