C++ repositories

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 52 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
tesseract-ocr/tesseract 2 strong C++ 231,448 lines 77,313 2026-11-03 adequate
duckdb/duckdb 2 adequate · 2 strong C++ 1,070,858 lines 41,709 2026-11-08 adequate
notepad-plus-plus/notepad-plus-plus 2 adequate · 2 strong C++ 481,205 lines 29,447 2026-11-07 adequate
ossrs/srs 4 adequate · 1 strong C++ 1,656,255 lines 29,365 2026-11-07 adequate
mongodb/mongo 2 adequate · 2 strong C++ 2,103,661 lines 28,660 2026-11-07 adequate
argotorg/solidity 3 strong C++ 508,376 lines 25,764 2026-11-08 adequate
lizardbyte/sunshine 5 adequate C++ 150,372 lines 42,950 2026-11-03 adequate
godotengine/godot 1 adequate · 3 strong C++ 2,023,533 lines 117,764 2026-10-25 strong
osquery/osquery 4 strong C++ 439,256 lines 23,669 2026-11-08 strong
fincept-corporation/finceptterminal 3 adequate · 1 strong C++ 908,790 lines 33,370 2026-11-03 adequate
doitsujin/dxvk 2 adequate · 1 strong C++ 181,686 lines 18,437 2026-11-07 adequate
bkaradzic/bgfx 1 adequate · 2 strong C++ 1,292,126 lines 17,624 2026-11-07 adequate
ocornut/imgui 2 adequate · 2 strong C++ 116,210 lines 76,437 2026-10-25 adequate
mltframework/shotcut 3 adequate · 1 strong C++ 215,423 lines 15,626 2026-11-08 adequate
sqlitebrowser/sqlitebrowser 1 adequate · 2 strong C++ 236,830 lines 24,750 2026-11-03 adequate
redpanda-data/redpanda 2 adequate · 3 strong C++ 1,452,495 lines 12,631 2026-11-08 strong
wasmedge/wasmedge 4 strong C++ 331,558 lines 10,844 2026-11-08 strong
oceanbase/oceanbase 2 adequate · 2 strong C++ 2,133,075 lines 10,357 2026-11-08 adequate
nlohmann/json 1 adequate · 2 strong C++ 181,747 lines 50,703 2026-10-25 adequate
ceph/ceph 3 adequate · 2 strong C++ 2,403,695 lines 17,195 2026-11-03 adequate
owasp-modsecurity/modsecurity 3 adequate · 1 strong C++ 129,365 lines 9,852 2026-11-07 adequate
qbittorrent/qbittorrent 3 adequate · 1 strong C++ 209,125 lines 40,459 2026-10-25 adequate
aseprite/aseprite 2 adequate · 2 strong C++ 283,290 lines 39,784 2026-10-25 adequate
snapcast/snapcast 4 adequate · 1 strong C++ 73,262 lines 8,042 2026-11-08 adequate
flameshot-org/flameshot 3 adequate · 1 strong C++ 33,608 lines 31,047 2026-10-25 adequate
gabime/spdlog 1 adequate · 2 strong C++ 34,721 lines 29,644 2026-10-25 adequate
bpftrace/bpftrace 3 strong C++ 144,592 lines 10,402 2026-11-03 adequate
keepassxreboot/keepassxc 1 adequate · 3 strong C++ 158,750 lines 28,949 2026-10-25 strong
dragonflydb/dragonfly 2 adequate · 3 strong C++ 348,384 lines 31,816 2026-10-23 strong
typesense/typesense 2 adequate · 3 strong C++ 289,731 lines 27,026 2026-10-22 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.