Repositories reading adequate
Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.
| Repository | Language | Size | Stars | Read | Band |
|---|---|---|---|---|---|
| hiddify/hiddify-app 3 adequate · 1 strong | Dart | 89,326 lines | 32,993 | 2026-10-25 | |
| flexprice/flexprice 3 adequate · 2 strong | Go | 931,077 lines | 6,871 | 2026-11-08 | |
| infobyte/faraday 3 adequate · 2 strong | Python | 90,000 lines | 6,838 | 2026-11-08 | |
| hexclave/hexclave 4 adequate · 1 strong | TypeScript | 684,619 lines | 6,878 | 2026-11-07 | |
| atuinsh/atuin 3 adequate · 2 strong | Rust | 157,273 lines | 31,862 | 2026-10-25 | |
| super-productivity/super-productivity 3 adequate · 2 strong | TypeScript | 1,184,736 lines | 23,207 | 2026-10-28 | |
| drawdb-io/drawdb 3 adequate · 2 strong | JavaScript | 53,851 lines | 40,116 | 2026-10-23 | |
| bunkerity/bunkerweb 4 adequate · 1 strong | Python | 2,058,501 lines | 11,213 | 2026-11-03 | |
| openspug/spug 3 adequate · 2 strong | JavaScript | 37,924 lines | 11,101 | 2026-11-03 | |
| kong/kong 3 adequate · 2 strong | Lua | 452,581 lines | 44,291 | 2026-10-22 | |
| ray-project/ray 3 adequate · 2 strong | Python | 1,947,982 lines | 44,105 | 2026-10-22 | |
| blacklanternsecurity/bbot 1 adequate · 3 strong | Python | 131,839 lines | 10,922 | 2026-11-03 | |
| koharu-rs/koharu 2 adequate · 2 strong | Rust | 180,296 lines | 6,578 | 2026-11-08 | |
| flagsmith/flagsmith 3 adequate · 2 strong | Python | 411,043 lines | 6,611 | 2026-11-07 | |
| harness/harness 4 adequate · 1 strong | Go | 661,685 lines | 38,682 | 2026-10-23 | |
| hashicorp/consul 3 adequate · 2 strong | Go | 900,713 lines | 30,088 | 2026-10-25 | |
| dokploy/dokploy 3 adequate · 2 strong | TypeScript | 1,408,971 lines | 37,974 | 2026-10-23 | |
| hapelee/legado-with-md3 2 adequate · 2 strong | Kotlin | 792,714 lines | 6,874 | 2026-11-07 | |
| flameshot-org/flameshot 3 adequate · 1 strong | C++ | 33,608 lines | 31,047 | 2026-10-25 | |
| khoj-ai/khoj 4 adequate · 1 strong | Python | 94,568 lines | 37,799 | 2026-10-23 | |
| gabime/spdlog 1 adequate · 2 strong | C++ | 34,721 lines | 29,644 | 2026-10-25 | |
| netless-io/flat 3 adequate · 2 strong | TypeScript | 67,848 lines | 6,442 | 2026-11-07 | |
| aisingapore/tagui 2 adequate · 2 strong | PHP | 32,904 lines | 6,340 | 2026-11-08 | |
| glanceapp/glance 4 adequate · 1 strong | Go | 19,829 lines | 37,640 | 2026-10-23 | |
| reacherhq/check-if-email-exists 3 adequate · 2 strong | Rust | 15,458 lines | 10,404 | 2026-11-03 | |
| signalapp/signal-android 2 adequate · 2 strong | Kotlin | 909,283 lines | 29,391 | 2026-10-25 | |
| rundeck/rundeck 3 adequate · 2 strong | Groovy | 785,386 lines | 6,355 | 2026-11-07 | |
| anuken/mindustry 3 adequate · 1 strong | Java | 321,895 lines | 29,111 | 2026-10-25 | |
| copilotkit/openbot 3 adequate · 2 strong | TypeScript | 1,161,748 lines | 10,300 | 2026-11-03 | |
| bpftrace/bpftrace 3 strong | C++ | 144,592 lines | 10,402 | 2026-11-03 |
What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.
How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.