The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 1,033 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
pallets/flask 1 adequate · 4 strong Python 19,910 lines 74,779 2026-10-25 adequate
clap-rs/clap 1 adequate · 3 strong Rust 103,662 lines 16,937 2026-11-07 adequate
infiniflow/ragflow 3 adequate · 3 strong Go 1,383,831 lines 92,747 2026-10-23 adequate
apache/superset 3 adequate · 3 strong Python 1,778,100 lines 74,921 2026-10-25 adequate
cinnamon/kotaemon 4 adequate · 2 strong Python 58,804 lines 25,872 2026-11-03 adequate
cryptomator/cryptomator 4 adequate · 1 strong Java 75,516 lines 16,460 2026-11-07 adequate
letta-ai/letta 1 adequate · 2 strong — 851 lines 25,331 2026-11-03 adequate
nextai-translator/nextai-translator 3 adequate · 2 strong TypeScript 66,610 lines 25,019 2026-11-03 adequate
sqlitebrowser/sqlitebrowser 2 adequate · 2 strong C++ 236,830 lines 24,750 2026-11-03 adequate
quantumnous/new-api 4 adequate · 2 strong Go 598,468 lines 50,868 2026-10-28 adequate
mltframework/shotcut 4 adequate · 1 strong C++ 215,423 lines 15,626 2026-11-07 adequate
sinaptik-ai/pandas-ai 3 adequate · 3 strong Python 24,067 lines 23,927 2026-11-03 adequate
getsops/sops 2 adequate · 3 strong Go 32,320 lines 23,594 2026-11-03 adequate
burntsushi/ripgrep 3 strong Rust 66,552 lines 68,602 2026-10-25 adequate
dani-garcia/vaultwarden 2 adequate · 2 strong Rust 66,596 lines 68,218 2026-10-25 adequate
chartdb/chartdb 4 adequate · 2 strong TypeScript 236,472 lines 23,054 2026-11-03 adequate
1panel-dev/maxkb 4 adequate · 2 strong Python 249,284 lines 23,106 2026-11-03 adequate
hynetworks/hysteria 4 adequate · 2 strong Go 42,772 lines 22,838 2026-11-03 adequate
coturn/coturn 4 adequate · 2 strong C 92,203 lines 14,542 2026-11-07 adequate
mkdocs/mkdocs 2 adequate · 3 strong Python 43,181 lines 22,534 2026-11-03 adequate
coollabsio/coolify 2 adequate · 4 strong PHP 530,203 lines 62,480 2026-10-25 adequate
termux/termux-app 3 adequate · 2 strong Java 50,315 lines 61,779 2026-10-25 adequate
mxcl/promisekit 3 adequate Swift 15,180 lines 14,206 2026-11-07 adequate
lodash/lodash 2 adequate · 3 strong JavaScript 64,577 lines 61,276 2026-10-25 adequate
minio/minio 4 adequate · 2 strong Go 394,523 lines 61,351 2026-10-25 adequate
unslothai/unsloth 4 adequate · 2 strong Python 1,908,319 lines 78,469 2026-10-23 adequate
headroomlabs-ai/headroom 4 adequate · 2 strong Python 789,935 lines 77,628 2026-10-23 adequate
phpoffice/phpspreadsheet 1 adequate · 4 strong PHP 338,958 lines 14,003 2026-11-07 adequate
openwall/john 3 adequate · 2 strong C 748,306 lines 13,879 2026-11-07 adequate
livecontainer/livecontainer 5 adequate Swift 40,660 lines 13,872 2026-11-07 adequate

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.