The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 456 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
curl/curl 1 adequate · 4 strong C 469,729 lines 42,929 2026-10-25 strong
juanfont/headscale 1 adequate · 4 strong Go 191,055 lines 44,187 2026-10-25 strong
nodebb/nodebb 1 adequate · 5 strong JavaScript 380,696 lines 15,246 2026-11-03 strong
botpress/botpress 2 adequate · 4 strong TypeScript 320,899 lines 14,975 2026-11-03 strong
alamofire/alamofire 1 adequate · 4 strong Swift 360,595 lines 42,420 2026-10-25 strong
psf/black 1 adequate · 4 strong Python 96,921 lines 41,857 2026-10-25 strong
goharbor/harbor 2 adequate · 4 strong Go 430,617 lines 29,629 2026-10-28 strong
trpc/trpc 1 adequate · 4 strong TypeScript 180,519 lines 40,667 2026-10-25 strong
gofiber/fiber 2 adequate · 4 strong Go 203,724 lines 40,186 2026-10-25 strong
orchestratorinc/agent-orchestrator 2 adequate · 4 strong Go 1,330,654 lines 14,044 2026-11-03 strong
nushell/nushell 1 adequate · 4 strong Rust 482,405 lines 40,580 2026-10-25 strong
prometheus/node_exporter 2 adequate · 4 strong Go 53,643 lines 13,893 2026-11-03 strong
diaspora/diaspora 2 adequate · 3 strong Ruby 186,587 lines 13,653 2026-11-03 strong
getpelican/pelican 1 adequate · 4 strong Python 32,441 lines 13,363 2026-11-03 strong
tailscale/tailscale 2 adequate · 4 strong Go 649,868 lines 36,994 2026-10-25 strong
apify/crawlee 2 adequate · 4 strong TypeScript 181,805 lines 26,278 2026-10-28 strong
langchain-ai/langgraph 2 adequate · 3 strong Python 213,940 lines 43,789 2026-10-23 strong
casey/just 1 adequate · 3 strong Rust 76,062 lines 36,039 2026-10-25 strong
python-poetry/poetry 2 adequate · 3 strong Python 113,213 lines 34,307 2026-10-25 strong
yourls/yourls 1 adequate · 3 strong PHP 29,487 lines 12,298 2026-11-03 strong
langfuse/langfuse 2 adequate · 4 strong TypeScript 1,270,259 lines 35,231 2026-10-25 strong
gristlabs/grist-core 2 adequate · 4 strong TypeScript 561,872 lines 12,043 2026-11-03 strong
kubescape/kubescape 1 adequate · 5 strong Go 435,437 lines 11,840 2026-11-03 strong
dgtlmoon/changedetection.io 2 adequate · 3 strong Python 102,058 lines 34,682 2026-10-25 strong
tokio-rs/tokio 4 strong Rust 196,074 lines 33,277 2026-10-25 strong
streamlink/streamlink 1 adequate · 3 strong Python 99,833 lines 11,890 2026-11-03 strong
milvus-io/milvus 2 adequate · 4 strong Go 2,186,085 lines 46,451 2026-10-22 strong
rocketchat/rocket.chat 2 adequate · 4 strong TypeScript 1,267,556 lines 46,294 2026-10-22 strong
grafana/pyroscope 2 adequate · 4 strong Go 530,836 lines 11,711 2026-11-03 strong
getsentry/sentry 2 adequate · 3 strong Python 2,321,511 lines 45,628 2026-10-22 strong

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.