Repositories reading adequate
Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.
| Repository | Language | Size | Stars | Read | Band |
|---|---|---|---|---|---|
| rundeck/rundeck 3 adequate · 2 strong | Groovy | 785,386 lines | 6,355 | 2026-11-07 | |
| anuken/mindustry 3 adequate · 1 strong | Java | 321,895 lines | 29,111 | 2026-10-25 | |
| copilotkit/openbot 3 adequate · 2 strong | TypeScript | 1,161,748 lines | 10,300 | 2026-11-03 | |
| bpftrace/bpftrace 3 strong | C++ | 144,592 lines | 10,402 | 2026-11-03 | |
| appsmithorg/appsmith 4 adequate · 1 strong | TypeScript | 1,679,190 lines | 41,105 | 2026-10-22 | |
| restic/restic 4 adequate · 1 strong | Go | 103,491 lines | 36,753 | 2026-10-23 | |
| agentscope-ai/qwenpaw 3 adequate · 2 strong | Python | 1,658,503 lines | 36,012 | 2026-10-23 | |
| karakeep-app/karakeep 3 adequate · 2 strong | TypeScript | 411,629 lines | 29,381 | 2026-10-25 | |
| webtorrent/webtorrent-desktop 1 adequate · 2 strong | JavaScript | 12,251 lines | 10,144 | 2026-11-03 | |
| 1remote/1remote 4 adequate | C# | 59,433 lines | 6,133 | 2026-11-07 | |
| dlt-hub/dlt 2 adequate · 2 strong | Python | 461,298 lines | 6,022 | 2026-11-08 | |
| strimzi/strimzi-kafka-operator 3 adequate · 2 strong | Java | 521,445 lines | 5,964 | 2026-11-08 | |
| mattermost/mattermost 3 adequate · 2 strong | TypeScript | 2,141,621 lines | 39,409 | 2026-10-22 | |
| hcengineering/platform 3 adequate · 2 strong | TypeScript | 976,972 lines | 27,822 | 2026-10-25 | |
| openebs/openebs 2 adequate · 2 strong | — | 30,791 lines | 9,842 | 2026-11-03 | |
| sillytavern/sillytavern 3 adequate · 2 strong | JavaScript | 242,902 lines | 34,854 | 2026-10-23 | |
| mlflow/mlflow 3 adequate · 2 strong | Python | 1,682,961 lines | 28,136 | 2026-10-25 | |
| portainer/portainer 3 adequate · 2 strong | TypeScript | 485,620 lines | 38,704 | 2026-10-22 | |
| ggreer/the_silver_searcher 1 adequate · 2 strong | C | 9,215 lines | 27,130 | 2026-10-25 | |
| wpscanteam/wpscan 2 adequate · 2 strong | Ruby | 237,075 lines | 9,832 | 2026-11-03 | |
| aquasecurity/trivy 3 adequate · 2 strong | Go | 355,517 lines | 38,620 | 2026-10-22 | |
| pyspur-dev/pyspur 4 adequate · 1 strong | TypeScript | 70,510 lines | 5,798 | 2026-11-08 | |
| tabbyml/tabby 3 adequate · 1 strong | Rust | 165,247 lines | 33,924 | 2026-10-23 | |
| pythagora-io/gpt-pilot 2 adequate · 3 strong | Python | 39,965 lines | 33,645 | 2026-10-23 | |
| suitecrm/suitecrm 3 adequate · 1 strong | PHP | 961,658 lines | 5,807 | 2026-11-07 | |
| tokio-rs/axum 2 adequate · 2 strong | Rust | 57,171 lines | 27,258 | 2026-10-25 | |
| trailbaseio/trailbase 4 adequate · 1 strong | Rust | 190,433 lines | 5,721 | 2026-11-08 | |
| libuv/libuv 3 strong | C | 120,178 lines | 27,212 | 2026-10-25 | |
| databendlabs/databend 3 adequate · 2 strong | Rust | 1,303,500 lines | 9,491 | 2026-11-03 | |
| pgdogdev/pgdog 2 adequate · 3 strong | Rust | 227,298 lines | 5,594 | 2026-11-08 |
What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.
How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.