Java repositories
Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.
| Repository | Language | Size | Stars | Read | Band |
|---|---|---|---|---|---|
| Featured: chosen by hand. | |||||
| kestra-io/kestra 2 adequate · 3 strong | Java | 649,805 lines | 28,531 | 2026-10-25 | |
| Every other reading, as the automated checks produced it. | |||||
| stirling-tools/stirling-pdf 3 adequate · 2 strong | Java | 1,311,983 lines | 93,291 | 2026-10-25 | |
| carguo/gsyvideoplayer 3 adequate · 1 strong | Java | 88,009 lines | 21,528 | 2026-11-07 | |
| opendataloader-project/opendataloader-pdf 4 strong | Java | 87,492 lines | 30,164 | 2026-11-03 | |
| floci-io/floci 3 adequate · 2 strong | Java | 1,693,546 lines | 28,267 | 2026-11-03 | |
| prestodb/presto 2 adequate · 3 strong | Java | 1,930,633 lines | 16,770 | 2026-11-07 | |
| cryptomator/cryptomator 3 adequate · 1 strong | Java | 75,516 lines | 16,460 | 2026-11-07 | |
| apache/pulsar 2 adequate · 3 strong | Java | 1,318,728 lines | 15,359 | 2026-11-07 | |
| termux/termux-app 2 adequate · 2 strong | Java | 50,315 lines | 61,779 | 2026-10-25 | |
| google/guava 1 adequate · 3 strong | Java | 810,423 lines | 51,909 | 2026-10-25 | |
| dbeaver/dbeaver 2 adequate · 2 strong | Java | 1,070,460 lines | 51,939 | 2026-10-25 | |
| gyf-dev/immersionbar 2 adequate · 1 strong | Java | 19,959 lines | 11,484 | 2026-11-07 | |
| reactivex/rxjava 1 adequate · 2 strong | Java | 456,593 lines | 48,190 | 2026-10-25 | |
| teamnewpipe/newpipe 3 adequate · 1 strong | Java | 134,421 lines | 39,825 | 2026-10-25 | |
| metersphere/metersphere 4 adequate · 1 strong | Java | 672,013 lines | 13,607 | 2026-11-03 | |
| jeecgboot/jeecgboot 5 adequate | Java | 528,787 lines | 48,269 | 2026-10-23 | |
| keycloak/keycloak 3 adequate · 2 strong | Java | 1,659,357 lines | 36,999 | 2026-10-25 | |
| halo-dev/halo 2 adequate · 3 strong | Java | 389,560 lines | 39,970 | 2026-10-23 | |
| anuken/mindustry 3 adequate · 1 strong | Java | 321,895 lines | 29,111 | 2026-10-25 | |
| apache/kafka 3 adequate · 2 strong | Java | 1,760,892 lines | 34,107 | 2026-10-23 | |
| jenkinsci/jenkins 2 adequate · 3 strong | Java | 570,024 lines | 26,726 | 2026-10-25 | |
| conductor-oss/conductor 2 adequate · 3 strong | Java | 651,663 lines | 32,371 | 2026-10-23 | |
| karatelabs/karate 4 strong | Java | 282,781 lines | 9,003 | 2026-11-03 | |
| ottermind/chat2db 2 adequate · 3 strong | Java | 505,964 lines | 28,331 | 2026-10-23 | |
| powerjob/powerjob 2 adequate · 3 strong | Java | 61,702 lines | 7,811 | 2026-11-03 | |
| thingsboard/thingsboard 2 adequate · 3 strong | Java | 1,431,442 lines | 22,501 | 2026-10-25 | |
| vespa-engine/vespa 3 adequate · 2 strong | Java | 2,031,838 lines | 7,158 | 2026-11-03 | |
| apache/skywalking 3 adequate · 2 strong | Java | 592,977 lines | 24,975 | 2026-10-23 | |
| dataease/dataease 5 adequate | Java | 514,668 lines | 24,626 | 2026-10-23 | |
| jetlinks/jetlinks-community 5 adequate | Java | 158,221 lines | 6,675 | 2026-11-03 | |
What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.
How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.