Java repositories

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 106 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
hazelcast/hazelcast 1 adequate · 3 strong Java 2,020,246 lines 6,629 2026-11-03 strong
apache/rocketmq 1 adequate · 2 strong Java 420,810 lines 22,644 2026-10-23 adequate
btraceio/btrace 4 adequate · 1 strong Java 210,683 lines 5,997 2026-11-03 adequate
janusgraph/janusgraph 1 adequate · 4 strong Java 272,715 lines 5,863 2026-11-03 strong
apache/shardingsphere 3 adequate · 2 strong Java 1,266,705 lines 20,813 2026-10-23 adequate
didi/dokit 2 adequate · 2 strong Java 255,854 lines 20,413 2026-10-23 adequate
zaproxy/zaproxy 1 adequate · 3 strong Java 348,209 lines 15,836 2026-10-25 strong
dromara/sa-token 2 adequate · 2 strong Java 262,924 lines 19,098 2026-10-23 adequate
apijson/apijson 3 adequate · 1 strong Java 30,065 lines 18,389 2026-10-23 adequate
orientechnologies/orientdb 3 adequate · 2 strong Java 749,377 lines 4,997 2026-11-03 adequate
openzipkin/zipkin 3 adequate · 2 strong Java 93,614 lines 17,470 2026-10-23 adequate
apache/seatunnel 3 adequate · 2 strong Java 1,468,875 lines 9,767 2026-10-28 adequate
apache/doris 2 adequate · 3 strong Java 1,828,323 lines 16,133 2026-10-23 strong
crate/crate 4 strong Java 858,205 lines 4,450 2026-11-03 strong
questdb/questdb 3 adequate · 2 strong Java 1,880,873 lines 17,462 2026-10-22 adequate
dependencytrack/dependency-track 1 adequate · 4 strong Java 412,000 lines 4,401 2026-11-03 strong
jitsi/jitsi 2 adequate · 1 strong Java 625,918 lines 4,354 2026-11-03 adequate
neo4j/neo4j 1 adequate · 2 strong Java 1,964,158 lines 17,350 2026-10-22 adequate
theonedev/onedev 4 adequate · 1 strong Java 659,027 lines 15,328 2026-10-23 adequate
elastic/logstash 2 adequate · 3 strong Java 227,604 lines 14,965 2026-10-23 strong
openrefine/openrefine 4 strong Java 274,244 lines 12,012 2026-10-25 strong
yacy/yacy_search_server 4 adequate · 1 strong Java 366,209 lines 4,097 2026-11-03 adequate
jhy/jsoup 3 strong Java 66,660 lines 11,402 2026-10-25 adequate
apache/shardingsphere-elasticjob 1 adequate · 2 strong Java 74,591 lines 8,197 2026-10-28 adequate
opensearch-project/opensearch 3 adequate · 2 strong Java 1,960,045 lines 13,900 2026-10-23 adequate
pinpoint-apm/pinpoint 1 adequate · 3 strong Java 848,765 lines 13,870 2026-10-23 strong
supertokens/supertokens-core 2 adequate · 2 strong Java 255,454 lines 15,333 2026-10-22 adequate
trinodb/trino 2 adequate · 3 strong Java 1,892,827 lines 13,364 2026-10-23 strong
datalinkdc/dinky 4 adequate · 1 strong Java 376,116 lines 3,779 2026-11-03 adequate
langchain4j/langchain4j 4 strong Java 687,385 lines 13,288 2026-10-23 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.