Repositories reading adequate
Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.
| Repository | Language | Size | Stars | Read | Band |
|---|---|---|---|---|---|
| ssoready/ssoready 4 adequate · 1 strong | TypeScript | 78,880 lines | 1,530 | 2026-11-08 | |
| kunzisoft/keepassdx 3 adequate · 1 strong | Kotlin | 110,294 lines | 7,394 | 2026-10-25 | |
| iflytek/astron-agent 3 adequate · 2 strong | Java | 627,055 lines | 8,916 | 2026-10-23 | |
| dimillian/icecubesapp 2 adequate · 2 strong | Swift | 48,777 lines | 7,073 | 2026-10-25 | |
| openshift/origin 5 adequate | Go | 570,839 lines | 8,694 | 2026-10-23 | |
| diggerhq/digger 4 adequate · 1 strong | Go | 132,914 lines | 5,060 | 2026-10-28 | |
| madler/zlib 3 adequate · 1 strong | C | 60,730 lines | 7,108 | 2026-10-25 | |
| pockethost/pockethost 4 adequate · 1 strong | TypeScript | 89,670 lines | 1,443 | 2026-11-08 | |
| infrahq/infra 2 adequate · 3 strong | Go | 88,293 lines | 1,471 | 2026-11-07 | |
| orange-cyberdefense/goad 2 adequate · 1 strong | PowerShell | 60,380 lines | 8,529 | 2026-10-23 | |
| cloudboost/cloudboost 2 adequate · 3 strong | JavaScript | 265,457 lines | 1,460 | 2026-11-08 | |
| getsentry/self-hosted 5 adequate | Shell | 9,230 lines | 9,621 | 2026-10-22 | |
| jooq/jooq 2 adequate · 2 strong | Java | 770,578 lines | 6,793 | 2026-10-25 | |
| marmelab/atomic-crm 3 adequate · 2 strong | TypeScript | 78,583 lines | 1,432 | 2026-11-08 | |
| primocms/primo 3 adequate · 2 strong | Svelte | 68,308 lines | 2,380 | 2026-11-03 | |
| falcosecurity/falco 4 adequate · 1 strong | C++ | 59,618 lines | 9,510 | 2026-10-22 | |
| awesomewm/awesome 2 adequate · 2 strong | Lua | 152,314 lines | 6,967 | 2026-10-25 | |
| datavane/tis 5 adequate | Java | 375,795 lines | 1,440 | 2026-11-07 | |
| tinyauthapp/tinyauth 3 adequate · 2 strong | Go | 34,660 lines | 8,412 | 2026-10-23 | |
| dgiot/dgiot 3 adequate | Erlang | 139,323 lines | 4,861 | 2026-10-28 | |
| quarylabs/quary 2 adequate · 2 strong | Rust | 141,862 lines | 2,386 | 2026-11-03 | |
| zeusln/zeus 2 adequate · 2 strong | TypeScript | 500,039 lines | 1,404 | 2026-11-08 | |
| juspay/hyperswitch-prism 3 adequate · 2 strong | Rust | 1,164,868 lines | 1,392 | 2026-11-08 | |
| ocaml/opam 1 adequate · 2 strong | OCaml | 99,697 lines | 1,382 | 2026-11-08 | |
| librephotos/librephotos 3 adequate · 2 strong | Python | 525,737 lines | 8,112 | 2026-10-23 | |
| fkie-cad/cwe_checker 1 adequate · 2 strong | Rust | 59,414 lines | 1,364 | 2026-11-08 | |
| timeplus-io/proton 3 adequate · 2 strong | C++ | 2,133,893 lines | 2,281 | 2026-11-03 | |
| hystax/optscale 3 adequate · 2 strong | Python | 460,833 lines | 2,238 | 2026-11-03 | |
| turbot/steampipe 5 adequate | Go | 65,198 lines | 7,989 | 2026-10-23 | |
| jasperapp/jasper 2 adequate · 2 strong | TypeScript | 24,611 lines | 1,331 | 2026-11-08 |
What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.
How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.