The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 167 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
opendatalab/mineru 1 significant · 3 adequate · 2 strong Python 312,235 lines 83,052 2026-11-03 significant findings
open-webui/open-webui 1 significant · 4 adequate · 1 strong Python 520,890 lines 153,736 2026-10-25 significant findings
fincept-corporation/finceptterminal 1 significant · 3 adequate · 1 strong C++ 908,790 lines 33,370 2026-11-03 significant findings
vxcontrol/pentagi 1 significant · 3 adequate · 2 strong Go 527,143 lines 33,140 2026-11-03 significant findings
localsend/localsend 1 significant · 3 adequate · 2 strong Dart 223,240 lines 92,758 2026-10-25 significant findings
cloakhq/cloakbrowser 1 significant · 2 adequate · 3 strong Python 70,380 lines 32,707 2026-11-03 significant findings
avajs/ava 1 significant · 2 adequate · 2 strong JavaScript 32,563 lines 20,828 2026-11-07 significant findings
trailofbits/algo 1 significant · 2 adequate · 3 strong Python 21,202 lines 30,449 2026-11-03 significant findings
opendataloader-project/opendataloader-pdf 1 significant · 4 strong Java 87,492 lines 30,164 2026-11-03 significant findings
onlook-dev/onlook 1 significant · 3 adequate · 2 strong TypeScript 184,925 lines 27,094 2026-11-03 significant findings
readest/readest 1 significant · 3 adequate · 2 strong TypeScript 836,775 lines 25,904 2026-11-03 significant findings
d2lang/d2 1 significant · 2 adequate · 2 strong Go 1,945,777 lines 25,785 2026-11-03 significant findings
egonex-ai/understand-anything 1 significant · 1 adequate · 3 strong TypeScript 126,416 lines 87,881 2026-10-23 significant findings
matsuridayo/nekoboxforandroid 1 significant · 4 adequate Kotlin 36,950 lines 23,380 2026-11-03 significant findings
swe-agent/swe-agent 1 significant · 1 adequate · 3 strong Python 26,205 lines 20,716 2026-11-03 significant findings
pathwaycom/serviette 1 significant · 2 adequate · 3 strong Python 26,859 lines 58,774 2026-10-23 significant findings
caprover/caprover 1 significant · 2 adequate · 3 strong TypeScript 30,923 lines 15,197 2026-11-03 significant findings
safing/portmaster 1 significant · 4 adequate · 1 strong Go 208,941 lines 14,019 2026-11-03 significant findings
dnscrypt/dnscrypt-proxy 1 significant · 4 adequate · 1 strong Go 24,544 lines 13,808 2026-11-03 significant findings
prisma/orm 1 significant · 2 adequate · 3 strong TypeScript 1,661,335 lines 47,664 2026-10-23 significant findings
serverless/serverless 1 significant · 4 adequate · 1 strong JavaScript 444,709 lines 46,921 2026-10-23 significant findings
run-llama/liteparse 1 significant · 4 adequate · 1 strong Rust 85,613 lines 12,975 2026-11-03 significant findings
herdrdev/herdr 1 significant · 3 strong Rust 387,249 lines 45,521 2026-10-23 significant findings
imputnet/cobalt 1 significant · 4 adequate · 1 strong Svelte 31,526 lines 45,389 2026-10-23 significant findings
sdwebimage/sdwebimage 1 significant · 1 adequate · 2 strong Objective-C 40,633 lines 25,614 2026-10-28 significant findings
jo-inc/camofox-browser 1 significant · 2 adequate · 3 strong JavaScript 43,073 lines 12,131 2026-11-03 significant findings
codewhale-hq/codewhale 1 significant · 3 adequate · 2 strong Rust 1,559,320 lines 41,157 2026-10-23 significant findings
getagentseal/codeburn 1 significant · 2 adequate · 3 strong TypeScript 387,337 lines 11,670 2026-11-03 significant findings
blinkospace/blinko 1 significant · 4 adequate · 1 strong TypeScript 92,021 lines 11,156 2026-11-03 significant findings
thedevs-network/kutt 1 significant · 3 adequate · 2 strong JavaScript 10,897 lines 11,188 2026-11-03 significant findings

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.