Python repositories

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 262 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
airbytehq/airbyte 3 adequate · 2 strong Python 1,007,689 lines 22,254 2026-10-22 adequate
permitio/opal 3 adequate · 2 strong Python 67,114 lines 5,524 2026-11-03 adequate
activitywatch/activitywatch 4 adequate Python 18,235 lines 19,357 2026-10-23 adequate
avaiga/taipy 1 adequate · 4 strong Python 173,217 lines 19,445 2026-10-23 strong
encode/httpx 1 adequate · 3 strong Python 33,284 lines 15,515 2026-10-25 strong
tribler/tribler 2 adequate · 3 strong Python 47,827 lines 5,343 2026-11-03 strong
fail2ban/fail2ban 1 adequate · 2 strong Python 45,975 lines 18,855 2026-10-23 adequate
plotly/plotly.py 1 adequate · 3 strong Python 591,790 lines 18,855 2026-10-23 strong
browser-use/browser-harness 1 adequate · 2 strong Python 53,530 lines 18,586 2026-10-23 adequate
defectdojo/django-defectdojo 2 adequate · 3 strong Python 1,413,006 lines 5,183 2026-11-03 strong
argilla-io/argilla 1 adequate · 4 strong Python 234,143 lines 5,193 2026-11-03 adequate
asyncfuncai/deepwiki-open 4 adequate · 1 strong Python 28,146 lines 18,267 2026-10-23 adequate
mediacms-io/mediacms 4 adequate · 1 strong Python 171,997 lines 5,177 2026-11-03 adequate
healthchecks/healthchecks 3 adequate · 2 strong Python 72,641 lines 10,464 2026-10-28 adequate
canner/wrenai 2 adequate · 2 strong Python 131,838 lines 17,957 2026-10-23 adequate
marqo-ai/marqo 4 adequate · 1 strong Python 172,614 lines 5,025 2026-11-03 adequate
rocketride-org/rocketride-server 4 adequate · 1 strong Python 1,089,662 lines 17,709 2026-10-23 adequate
vectifyai/openkb 1 adequate · 3 strong Python 62,199 lines 4,842 2026-11-03 strong
integuru-ai/integuru 1 adequate · 1 strong Python 2,441 lines 4,790 2026-11-03 adequate
robusta-dev/krr 2 adequate · 3 strong Python 10,833 lines 4,769 2026-11-03 strong
borgbackup/borg 4 strong Python 109,282 lines 13,789 2026-10-25 strong
mealie-recipes/mealie 3 adequate · 2 strong Python 330,864 lines 13,342 2026-10-25 adequate
vibrantlabsai/ragas 3 adequate · 1 strong Python 110,958 lines 16,134 2026-10-23 adequate
raga-ai-hub/ragaai-catalyst 2 adequate · 2 strong Python 47,897 lines 16,179 2026-10-23 adequate
intuitem/ciso-assistant-community 3 adequate · 2 strong Python 1,584,845 lines 4,571 2026-11-03 adequate
pydantic/logfire 1 adequate · 3 strong Python 182,901 lines 4,530 2026-11-03 strong
saltstack/salt 3 adequate · 2 strong Python 1,089,367 lines 15,721 2026-10-23 adequate
greaterwms/greaterwms 3 adequate · 2 strong Python 77,175 lines 4,429 2026-11-03 adequate
mljar/mercury 2 adequate · 3 strong Python 46,033 lines 4,357 2026-11-03 strong
sqlalchemy/sqlalchemy 1 adequate · 3 strong Python 644,247 lines 12,189 2026-10-25 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.