The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 456 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
junegunn/fzf 1 adequate · 3 strong Go 54,765 lines 83,258 2026-10-25 strong
gitbookio/gitbook 2 adequate · 3 strong TypeScript 133,833 lines 29,086 2026-11-03 strong
jesseduffield/lazygit 2 adequate · 3 strong Go 180,850 lines 82,672 2026-10-25 strong
nestjs/nest 2 adequate · 3 strong TypeScript 177,709 lines 76,747 2026-10-25 strong
appflowy-io/appflowy 2 adequate · 3 strong Dart 514,241 lines 76,942 2026-10-25 strong
redis/redis 2 adequate · 4 strong C 549,207 lines 76,478 2026-10-25 strong
caddyserver/caddy 1 adequate · 4 strong Go 116,020 lines 76,094 2026-10-25 strong
prestodb/presto 2 adequate · 4 strong Java 1,930,633 lines 16,770 2026-11-07 strong
strapi/strapi 1 adequate · 4 strong TypeScript 795,216 lines 73,240 2026-10-25 strong
openhands/openhands 2 adequate · 4 strong TypeScript 469,413 lines 91,653 2026-10-23 strong
tursodatabase/turso 5 strong Rust 1,056,899 lines 25,131 2026-11-03 strong
dolthub/dolt 2 adequate · 4 strong Go 622,064 lines 24,806 2026-11-03 strong
vllm-project/vllm 1 adequate · 4 strong Python 2,242,337 lines 96,400 2026-10-22 strong
expressjs/express 1 adequate · 4 strong JavaScript 26,545 lines 69,478 2026-10-25 strong
hkuds/nanobot 2 adequate · 4 strong Python 633,709 lines 49,546 2026-10-28 strong
apache/pulsar 2 adequate · 4 strong Java 1,318,728 lines 15,359 2026-11-07 strong
prometheus/prometheus 2 adequate · 4 strong Go 488,660 lines 66,304 2026-10-25 strong
rtk-ai/rtk 2 adequate · 3 strong Rust 258,487 lines 84,376 2026-10-23 strong
traefik/traefik 2 adequate · 4 strong Go 383,128 lines 64,966 2026-10-25 strong
alacritty/alacritty 2 adequate · 3 strong Rust 38,433 lines 65,834 2026-10-25 strong
scrapy/scrapy 1 adequate · 4 strong Python 102,098 lines 64,525 2026-10-25 strong
withastro/astro 2 adequate · 4 strong TypeScript 338,410 lines 63,745 2026-10-25 strong
ghostty-org/ghostty 1 adequate · 4 strong Zig 479,227 lines 61,727 2026-10-25 strong
starship/starship 1 adequate · 4 strong Rust 230,693 lines 60,082 2026-10-25 strong
php-cs-fixer/php-cs-fixer 2 adequate · 4 strong PHP 321,768 lines 13,573 2026-11-07 strong
rails/rails 6 strong Ruby 694,220 lines 58,787 2026-10-25 strong
fastlane/fastlane 2 adequate · 3 strong Ruby 246,202 lines 42,319 2026-10-28 strong
jellyfin/jellyfin 2 adequate · 4 strong C# 410,923 lines 57,542 2026-10-25 strong
spatie/laravel-permission 5 strong PHP 20,491 lines 12,982 2026-11-07 strong
go-gitea/gitea 2 adequate · 4 strong Go 666,058 lines 58,199 2026-10-25 strong

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.