Go repositories

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 316 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
snyk/driftctl 2 adequate · 2 strong Go 275,993 lines 2,666 2026-11-03 adequate
absmach/magistrala 2 adequate · 3 strong Go 119,482 lines 2,658 2026-11-03 strong
bitnami/sealed-secrets 2 adequate · 3 strong Go 25,226 lines 9,316 2026-10-23 strong
supabase/auth 5 strong Go 116,528 lines 2,592 2026-11-03 strong
maximhq/bifrost 3 adequate · 2 strong Go 1,695,599 lines 9,051 2026-10-23 adequate
openshift/origin 5 adequate Go 570,839 lines 8,694 2026-10-23 adequate
diggerhq/digger 4 adequate · 1 strong Go 132,914 lines 5,060 2026-10-28 adequate
prometheus/alertmanager 1 adequate · 4 strong Go 119,424 lines 8,669 2026-10-23 strong
infrahq/infra 2 adequate · 3 strong Go 88,293 lines 1,471 2026-11-07 adequate
tinyauthapp/tinyauth 3 adequate · 2 strong Go 34,660 lines 8,412 2026-10-23 adequate
ovh/utask 2 adequate · 3 strong Go 42,874 lines 1,413 2026-11-08 strong
superplanehq/superplane 4 adequate · 1 strong Go 1,594,219 lines 8,169 2026-10-23 adequate
lightningnetwork/lnd 2 adequate · 3 strong Go 914,706 lines 8,204 2026-10-23 strong
turbot/steampipe 5 adequate Go 65,198 lines 7,989 2026-10-23 adequate
warrant-dev/warrant 3 adequate · 1 strong Go 44,969 lines 1,341 2026-11-08 adequate
coroot/coroot 4 adequate · 1 strong Go 98,435 lines 7,982 2026-10-23 adequate
projectcapsule/capsule 2 adequate · 3 strong Go 262,751 lines 2,211 2026-11-03 strong
sysadminsmedia/homebox 3 adequate · 2 strong Go 249,620 lines 7,624 2026-10-23 adequate
googlecloudplatform/berglas 2 adequate · 2 strong Go 8,880 lines 1,303 2026-11-08 adequate
xalgorix/xalgorix 3 adequate · 2 strong Go 382,352 lines 1,291 2026-11-08 adequate
streamdal/plumber 1 adequate · 4 strong Go 85,392 lines 2,154 2026-11-03 adequate
fluxcd/flux2 2 adequate · 3 strong Go 67,121 lines 8,458 2026-10-22 strong
matrixorigin/matrixone 3 adequate · 2 strong Go 2,468,474 lines 2,062 2026-11-03 adequate
go-rod/rod 4 adequate · 1 strong Go 59,487 lines 7,138 2026-10-23 adequate
openyurtio/openyurt 3 adequate · 2 strong Go 182,888 lines 2,010 2026-11-03 adequate
aquasecurity/tfsec 1 adequate · 3 strong Go 34,052 lines 7,059 2026-10-23 adequate
codeberg.org/forgejo/forgejo 3 adequate · 2 strong Go 846,421 lines 5,540 2026-10-25 adequate
skyhook-io/radar 3 adequate · 2 strong Go 1,131,982 lines 4,048 2026-10-28 adequate
luraproject/lura 1 adequate · 4 strong Go 23,265 lines 6,805 2026-10-23 strong
grpc-ecosystem/go-grpc-middleware 4 strong Go 14,363 lines 6,759 2026-10-23 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.