Repositories reading adequate
Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.
| Repository | Language | Size | Stars | Read | Band |
|---|---|---|---|---|---|
| eclipse-openvsx/openvsx 3 adequate · 2 strong | Java | 234,517 lines | 2,067 | 2026-11-03 | |
| projectsend/projectsend 3 adequate · 2 strong | PHP | 227,159 lines | 2,045 | 2026-11-03 | |
| go-rod/rod 4 adequate · 1 strong | Go | 59,487 lines | 7,138 | 2026-10-23 | |
| parabolinc/parabol 4 adequate · 1 strong | TypeScript | 380,042 lines | 2,017 | 2026-11-03 | |
| datajuicer/data-juicer 3 adequate · 1 strong | Python | 253,833 lines | 7,181 | 2026-10-23 | |
| openyurtio/openyurt 3 adequate · 2 strong | Go | 182,888 lines | 2,010 | 2026-11-03 | |
| moonrepo/moon 2 adequate · 2 strong | Rust | 196,487 lines | 4,169 | 2026-10-28 | |
| nextcloud/android 2 adequate · 2 strong | Kotlin | 253,487 lines | 5,606 | 2026-10-25 | |
| fastcrw/crw 3 adequate · 1 strong | Rust | 262,618 lines | 1,214 | 2026-11-08 | |
| aquasecurity/tfsec 1 adequate · 3 strong | Go | 34,052 lines | 7,059 | 2026-10-23 | |
| beikeshop/beikeshop 3 adequate · 2 strong | PHP | 163,016 lines | 1,986 | 2026-11-03 | |
| odoo/docker 3 adequate · 1 strong | Dockerfile | 1,618 lines | 1,217 | 2026-11-07 | |
| snowplow/snowplow 3 adequate | Scala | 8,381 lines | 7,045 | 2026-10-23 | |
| getnao/nao 3 adequate · 2 strong | TypeScript | 1,409,840 lines | 1,980 | 2026-11-03 | |
| laravel/jetstream 3 strong | PHP | 19,907 lines | 4,059 | 2026-10-28 | |
| codeberg.org/forgejo/forgejo 3 adequate · 2 strong | Go | 846,421 lines | 5,540 | 2026-10-25 | |
| openremote/core 3 adequate · 2 strong | Java | 374,038 lines | 1,970 | 2026-11-03 | |
| dromara/jpom 5 adequate | Java | 182,826 lines | 1,951 | 2026-11-03 | |
| sync-in/server 3 adequate · 2 strong | TypeScript | 144,642 lines | 1,951 | 2026-11-03 | |
| macpass/macpass 3 adequate · 1 strong | Objective-C | 32,107 lines | 6,885 | 2026-10-23 | |
| greptimeteam/greptimedb 3 adequate · 2 strong | Rust | 1,165,036 lines | 6,760 | 2026-10-23 | |
| apache/flink-cdc 3 adequate · 1 strong | Java | 462,721 lines | 6,485 | 2026-10-23 | |
| ossf/cve-bin-tool 2 adequate · 2 strong | Python | 94,069 lines | 1,808 | 2026-11-03 | |
| gitlab.com/gitlab-org/cli 2 adequate · 2 strong | — | 217,035 lines | 1,101 | 2026-11-08 | |
| apiparklab/apipark 4 adequate · 1 strong | TypeScript | 151,014 lines | 1,823 | 2026-11-03 | |
| umbraco/umbraco-cms 3 adequate · 2 strong | C# | 1,420,731 lines | 5,279 | 2026-10-25 | |
| sonicjs-org/sonicjs 3 adequate · 2 strong | TypeScript | 290,370 lines | 1,785 | 2026-11-03 | |
| dialmasterorg/youtarr 3 adequate · 2 strong | JavaScript | 320,103 lines | 1,792 | 2026-11-03 | |
| openchoreo/openchoreo 3 adequate · 2 strong | Go | 717,077 lines | 1,759 | 2026-11-03 | |
| rack/rack 1 adequate · 2 strong | Ruby | 25,462 lines | 5,132 | 2026-10-25 |
What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.
How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.