The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 456 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
certbot/certbot 2 adequate · 3 strong Python 104,561 lines 33,257 2026-10-25 strong
honojs/hono 1 adequate · 4 strong TypeScript 96,209 lines 32,387 2026-10-25 strong
avaloniaui/avalonia 1 adequate · 4 strong C# 688,814 lines 31,603 2026-10-25 strong
centrifugal/centrifugo 1 adequate · 4 strong Go 125,526 lines 10,946 2026-11-03 strong
istio/istio 2 adequate · 4 strong Go 850,268 lines 38,469 2026-10-23 strong
docker/compose 2 adequate · 3 strong Go 100,495 lines 38,439 2026-10-23 strong
koreader/koreader 2 adequate · 4 strong Lua 235,459 lines 30,020 2026-10-25 strong
firecracker-microvm/firecracker 1 adequate · 5 strong Rust 228,438 lines 37,583 2026-10-23 strong
falkordb/falkordb 1 adequate · 4 strong Rust 272,760 lines 10,502 2026-11-03 strong
rxhanson/rectangle 1 adequate · 3 strong Swift 35,697 lines 29,982 2026-10-25 strong
bpftrace/bpftrace 1 adequate · 3 strong C++ 144,592 lines 10,402 2026-11-03 strong
pingcap/tidb 2 adequate · 4 strong Go 2,035,379 lines 40,670 2026-10-22 strong
frappe/erpnext 5 strong Python 1,013,840 lines 40,460 2026-10-22 strong
plausible/analytics 2 adequate · 4 strong Elixir 353,331 lines 29,217 2026-10-25 strong
keepassxreboot/keepassxc 1 adequate · 4 strong C++ 158,750 lines 28,949 2026-10-25 strong
pydantic/pydantic 1 adequate · 4 strong Python 251,442 lines 28,889 2026-10-25 strong
prometheus-operator/prometheus-operator 6 strong Go 235,978 lines 9,994 2026-11-03 strong
openebs/openebs 2 adequate · 3 strong — 30,791 lines 9,842 2026-11-03 strong
postgrest/postgrest 1 adequate · 4 strong Haskell 70,201 lines 27,685 2026-10-25 strong
reviewdog/reviewdog 2 adequate · 4 strong Go 28,892 lines 9,716 2026-11-03 strong
tokio-rs/axum 2 adequate · 3 strong Rust 57,171 lines 27,258 2026-10-25 strong
libuv/libuv 4 strong C 120,178 lines 27,212 2026-10-25 strong
valkey-io/valkey 2 adequate · 4 strong C 582,581 lines 27,314 2026-10-25 strong
jenkinsci/jenkins 2 adequate · 4 strong Java 570,024 lines 26,726 2026-10-25 strong
onyx-dot-app/onyx 2 adequate · 4 strong Python 1,826,289 lines 33,234 2026-10-23 strong
librehardwaremonitor/librehardwaremonitor 2 adequate · 3 strong C# 79,650 lines 9,335 2026-11-03 strong
topoteretes/cognee 2 adequate · 4 strong Python 690,790 lines 32,699 2026-10-23 strong
activerecord-hackery/ransack 1 adequate · 3 strong Ruby 25,013 lines 5,858 2026-11-07 strong
spotify/luigi 1 adequate · 4 strong Python 71,455 lines 18,782 2026-10-28 strong
dragonflydb/dragonfly 2 adequate · 4 strong C++ 348,384 lines 31,816 2026-10-23 strong

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.