Public-interest software inspection versioned methodology

A public record of software health.

Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.

01Evidence attached02Results independent of payment03Method versioned

Request a scan

Free for high public-value repositories. Private and niche repositories follow the documented certification route.

Public queue operational
Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue

The record, as it stands.

Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.

Indexed repositories
45,417
Monthly downloads under inspection
387B
Median health index
57 Moderate
45,417 recordsRanked by popularity · browse by tag · record statistics
npm
59Moderatehealth index
asymmetric-effort/specifyjs
A declarative TypeScript UI framework built for performance, browser compatibility, and developer simplicity.
TypeScript★ 2↓ 3,334/moJul 19, 2026
No licenseJul 19, 2026 · metrics 1.13.0
Packagist
53Moderatehealth index
async-aws/ssm
[READ ONLY] SSM client
PHP★ 2↓ 61.9K/moJul 29, 2026
MITJul 29, 2026 · metrics 1.13.0
23Criticalhealth index
atatus/atatus-nodejs
Node.js APM application monitoring and crash reporting
Mixed★ 2Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
Go
40At riskhealth index
atendi9/meta
zero-dependency Go package for integrating with the Facebook/Meta Graph API
Go★ 2Jul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
50Moderatehealth index
atensecurity/pulumi-thoth
Official Pulumi provider for Thoth headless control-plane workflows
Go★ 2Jul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 1.13.0
npm
60Moderatehealth index
atheck/eslint-config-heck
No repository description published.
TypeScript · JavaScript★ 2↓ 2,935/moJul 17, 2026
No licenseJul 17, 2026 · metrics 1.13.0
Go
38At riskhealth index
atomclub/sshreq
sshreq is an internal tool to generate certificate signing request.
Go★ 2↓ 0/moJul 14, 2026
No licenseJul 14, 2026 · metrics 1.13.0
Go
42At riskhealth index
atterpac/qry
Open Source TUI Query Client
Go★ 2Jul 20, 2026
No licenseJul 20, 2026 · metrics 1.13.0
npm
55Moderatehealth index
authzed/spicedb-parser-js
Shared parser logic common to the Playground and the VSCode extension
TypeScript★ 2↓ 38.9K/moJul 19, 2026
Apache-2.0Jul 19, 2026 · metrics 1.13.0
npm
63Moderatehealth index
autoguru-au/octane
A monorepo house for AutoGuru's peripheral TypeScript packages and libraries 😅
TypeScript · JavaScript★ 2↓ 7,458/moJul 26, 2026
MITJul 26, 2026 · metrics 1.13.0
Go
63Moderatehealth index
automa-saga/automa
A Saga workflow engine for sequential and transactional business processes.
Go★ 2Jul 26, 2026
Apache-2.0Jul 26, 2026 · metrics 1.13.0
npm · Go
62Moderatehealth index
autonoco/buttons
CLI workflow engine for agents.
Go★ 2↓ 6,939/moJul 15, 2026
Apache-2.0Jul 15, 2026 · metrics 1.13.0
31At riskhealth index
ava-labs/firewood-go
CI generated golang bindings of Firewood with static binaries attached
Mixed★ 2Jul 16, 2026
Custom licenseJul 16, 2026 · metrics 1.13.0
Go
36At riskhealth index
aveyuan/vbasedata
基础组件封装
Go★ 2Jul 22, 2026
No licenseJul 22, 2026 · metrics 1.13.0
Go
59Moderatehealth index
aws-controllers-k8s/amq-controller
ACK service controller for Amazon MQ
Python · Go · Go Template★ 2Jul 16, 2026
Apache-2.0Jul 16, 2026 · metrics 1.13.0
Go
58Moderatehealth index
aws-controllers-k8s/pkg
ACK Common packages
Go★ 2Jul 17, 2026
Apache-2.0Jul 17, 2026 · metrics 1.13.0
Go
55Moderatehealth index
axelgar/opentree
Orchestrate parallel AI coding sessions in isolated git worktrees.
Go★ 2↓ 0/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
npm
57Moderatehealth index
axl-sdk/axl
TypeScript SDK for orchestrating Agentic Systems — concurrency, structured output, cost control, and consensus as first-class primitives.
TypeScript★ 2↓ 3,214/moJul 27, 2026
Apache-2.0Jul 27, 2026 · metrics 1.13.0
npm
47At riskhealth index
ayhamDev/chesai-ui
An animated, MD3-inspired React component library for building beautiful web, desktop, and mobile apps, built with Radix UI, Framer Motion, and Tailwind CSS.
TypeScript★ 2↓ 7,714/moJul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
npm
62Moderatehealth index
ayleen/triss-coworker
Cheap DeepSeek coworker for Claude Code/Codex. Delegate bulk reads, boilerplate, and chat extraction to save 60-70% of your token budget.
JavaScript★ 2↓ 2,196/moJul 17, 2026
MITJul 17, 2026 · metrics 1.13.0
Go
66Moderatehealth index
azure/run-command-handler-linux
RunCommand extension handler runs scripts within VMs sent by PUT RunCommand resource to a Linux VM.
Go★ 2Jul 18, 2026
MITJul 18, 2026 · metrics 1.13.0
PyPI
56Moderatehealth index
azusachino/daphne
A fast, stateless Telegram bot that turns raw media links into native, Telegram-friendly media.
Python★ 2Jul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
Go
50Moderatehealth index
b0bbywan/go-cd-cuer
tool to create cue file from current disc
Go★ 2Jul 16, 2026
MITJul 16, 2026 · metrics 1.13.0
Go
49At riskhealth index
b0bbywan/go-mpd-discplayer
MPD daemon client to autoplay audio disc, usb devices and scheduled uri
Go★ 2↓ 0/moJul 13, 2026
MITJul 13, 2026 · metrics 1.13.0
PyPI
64Moderatehealth index
b7n0de/proofbundle
Offline cryptographic receipts for AI evaluation results — Ed25519 + RFC 6962 Merkle + optional SD-JWT. Integrity, not truth
Python★ 2↓ 6,574/moJul 23, 2026
MITJul 23, 2026 · metrics 1.13.0
20Criticalhealth index
bachya/advanced-ssh-config
:computer: assh: ssh wrapper using ProxyCommand that adds regex, aliases, gateways, includes, dynamic hostnames to SSH and ssh-config
Go★ 2Jul 25, 2026
MITJul 25, 2026 · metrics 1.13.0
Go
55Moderatehealth index
badbuka/letsencrypt-exporter
A Prometheus exporter and reusable Go library that auto-discovers Let's Encrypt certificates under `/etc/letsencrypt/live/*` and exposes their validity windows.
Go★ 2Jul 27, 2026
No licenseJul 27, 2026 · metrics 1.13.0
Go
48At riskhealth index
bakhod1r/oneenv
Parse .env files straight into your Go structs — zero dependencies, pure stdlib.
Go★ 2Jul 24, 2026
MITJul 24, 2026 · metrics 1.13.0