Python repositories
Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.
| Repository | Language | Size | Stars | Read | Band |
|---|---|---|---|---|---|
| fivetran/great_expectations 3 adequate · 2 strong | Python | 591,142 lines | 11,897 | 2026-10-23 | |
| sigmahq/sigma 3 adequate · 2 strong | Python | 227,642 lines | 11,329 | 2026-10-23 | |
| octoprint/octoprint 1 adequate · 3 strong | Python | 225,605 lines | 9,117 | 2026-10-25 | |
| kedro-org/kedro 1 adequate · 4 strong | Python | 91,632 lines | 11,031 | 2026-10-23 | |
| swirlai/swirl-search 3 adequate · 2 strong | Python | 44,759 lines | 3,051 | 2026-11-03 | |
| skypilot-org/skypilot 2 adequate · 3 strong | Python | 724,101 lines | 10,738 | 2026-10-23 | |
| django-cms/django-cms 1 adequate · 3 strong | Python | 132,493 lines | 10,679 | 2026-10-23 | |
| modin-project/modin 2 adequate · 2 strong | Python | 149,285 lines | 10,391 | 2026-10-23 | |
| chdb-io/chdb 1 adequate · 3 strong | Python | 266,143 lines | 2,922 | 2026-11-03 | |
| dlt-hub/dlt 2 adequate · 2 strong | Python | 461,298 lines | 6,022 | 2026-10-28 | |
| polarsource/polar 2 adequate · 3 strong | Python | 1,144,782 lines | 10,411 | 2026-10-23 | |
| dograh-hq/dograh 2 adequate · 3 strong | Python | 356,854 lines | 5,972 | 2026-10-28 | |
| wandb/wandb 1 adequate · 4 strong | Python | 427,201 lines | 11,308 | 2026-10-22 | |
| pycaret/pycaret 4 adequate · 1 strong | Python | 127,830 lines | 9,859 | 2026-10-23 | |
| the-momentum/open-wearables 3 adequate · 2 strong | Python | 191,893 lines | 2,759 | 2026-11-03 | |
| ctf-wiki/ctf-wiki 3 adequate · 1 strong | Python | 158,142 lines | 9,729 | 2026-10-23 | |
| xonsh/xonsh 4 strong | Python | 130,236 lines | 9,685 | 2026-10-23 | |
| flaskbb/flaskbb 1 adequate · 4 strong | Python | 48,012 lines | 2,665 | 2026-11-03 | |
| aboutcode-org/scancode-toolkit 1 adequate · 3 strong | Python | 1,825,803 lines | 2,662 | 2026-11-03 | |
| bridgecrewio/checkov 1 adequate · 4 strong | Python | 616,704 lines | 9,098 | 2026-10-23 | |
| iflytek/astron-rpa 4 adequate · 1 strong | Python | 348,202 lines | 5,280 | 2026-10-28 | |
| allegro/ralph 2 adequate · 3 strong | Python | 106,444 lines | 2,532 | 2026-11-03 | |
| mage-ai/mage-ai 5 adequate | Python | 551,181 lines | 8,836 | 2026-10-23 | |
| frappe/builder 2 adequate · 3 strong | Python | 89,840 lines | 2,464 | 2026-11-03 | |
| learnhouse/learnhouse 4 adequate · 1 strong | Python | 617,292 lines | 2,440 | 2026-11-03 | |
| sodadata/soda-core 1 adequate · 4 strong | Python | 103,426 lines | 2,463 | 2026-11-03 | |
| instill-ai/instill-core 3 adequate · 2 strong | Python | 64,120 lines | 2,320 | 2026-11-03 | |
| librephotos/librephotos 3 adequate · 2 strong | Python | 525,737 lines | 8,112 | 2026-10-23 | |
| hystax/optscale 3 adequate · 2 strong | Python | 460,833 lines | 2,238 | 2026-11-03 | |
| bentoml/bentoml 2 adequate · 3 strong | Python | 113,058 lines | 8,914 | 2026-10-22 |
What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.
How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.