Repositories reading adequate
Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.
| Repository | Language | Size | Stars | Read | Band |
|---|---|---|---|---|---|
| leon-ai/leon 4 adequate · 1 strong | TypeScript | 243,899 lines | 17,644 | 2026-11-03 | |
| astral-sh/ruff 4 adequate · 1 strong | Rust | 1,284,076 lines | 49,818 | 2026-10-25 | |
| nlohmann/json 1 adequate · 2 strong | C++ | 181,747 lines | 50,703 | 2026-10-25 | |
| crewaiinc/crewai 3 adequate · 2 strong | Python | 671,642 lines | 60,540 | 2026-10-23 | |
| ceph/ceph 3 adequate · 2 strong | C++ | 2,403,695 lines | 17,195 | 2026-11-03 | |
| tmux/tmux 2 adequate · 2 strong | C | 147,728 lines | 49,513 | 2026-10-25 | |
| reactivex/rxjava 1 adequate · 2 strong | Java | 456,593 lines | 48,190 | 2026-10-25 | |
| nocodb/nocodb 4 adequate · 1 strong | TypeScript | 983,582 lines | 65,436 | 2026-10-22 | |
| discourse/discourse 2 adequate · 2 strong | Ruby | 2,225,419 lines | 47,898 | 2026-10-25 | |
| studyzy/imewlconverter 2 adequate · 2 strong | C# | 116,356 lines | 10,516 | 2026-11-07 | |
| acmesh-official/acme.sh 2 adequate · 1 strong | Shell | 71,134 lines | 47,773 | 2026-10-25 | |
| square/okhttp 2 adequate · 2 strong | Kotlin | 160,350 lines | 47,076 | 2026-10-25 | |
| logseq/logseq 2 adequate · 2 strong | Clojure | 416,327 lines | 45,092 | 2026-10-25 | |
| helix-editor/helix 1 adequate · 2 strong | Rust | 412,377 lines | 46,361 | 2026-10-25 | |
| iina/iina 2 adequate · 1 strong | Swift | 94,246 lines | 46,483 | 2026-10-25 | |
| kubeflow/kubeflow 6 findings | — | 343 lines | 15,948 | 2026-11-03 | |
| termix-ssh/termix 4 adequate · 1 strong | TypeScript | 1,920,750 lines | 15,806 | 2026-11-03 | |
| paradevai/paradev 4 adequate · 1 strong | TypeScript | 2,784,458 lines | 15,869 | 2026-11-03 | |
| files-community/files 2 adequate · 2 strong | C# | 151,968 lines | 45,663 | 2026-10-25 | |
| sharkdp/fd 2 strong | Rust | 11,649 lines | 44,614 | 2026-10-25 | |
| ansible/awx 3 adequate · 1 strong | Python | 223,387 lines | 15,618 | 2026-11-03 | |
| owasp-amass/amass 5 adequate | Go | 39,830 lines | 15,457 | 2026-11-03 | |
| sxyazi/yazi 2 adequate · 1 strong | Rust | 91,229 lines | 42,508 | 2026-10-25 | |
| exelban/stats 3 adequate · 1 strong | Swift | 49,507 lines | 42,213 | 2026-10-25 | |
| labring/fastgpt 3 adequate · 2 strong | TypeScript | 997,571 lines | 29,931 | 2026-10-28 | |
| vim/vim 3 adequate · 1 strong | Vim Script | 1,436,725 lines | 41,005 | 2026-10-25 | |
| duckdb/duckdb 1 adequate · 2 strong | C++ | 1,070,858 lines | 41,709 | 2026-10-25 | |
| the-pr-agent/pr-agent 3 adequate · 2 strong | Python | 224,506 lines | 14,267 | 2026-11-03 | |
| schollz/croc 3 adequate · 2 strong | Go | 83,381 lines | 40,474 | 2026-10-25 | |
| safing/portmaster 4 adequate · 1 strong | Go | 208,941 lines | 14,019 | 2026-11-03 |
What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.
How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.