Python repositories

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 262 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
bentoml/bentoml 2 adequate · 3 strong Python 113,058 lines 8,914 2026-10-22 strong
osmantic/ods 3 adequate · 2 strong Python 844,920 lines 7,665 2026-10-23 adequate
freeipa/freeipa 2 adequate · 3 strong Python 678,513 lines 1,298 2026-11-07 strong
someengineering/fixinventory 3 adequate · 2 strong Python 227,993 lines 2,088 2026-11-03 adequate
bytewax/bytewax 3 adequate · 2 strong Python 52,796 lines 2,070 2026-11-03 adequate
feast-dev/feast 3 adequate · 2 strong Python 471,647 lines 7,345 2026-10-23 adequate
zipstack/unstract 3 adequate · 2 strong Python 435,722 lines 7,296 2026-10-23 adequate
datajuicer/data-juicer 3 adequate · 1 strong Python 253,833 lines 7,181 2026-10-23 adequate
onionshare/onionshare 1 adequate · 3 strong Python 56,858 lines 7,184 2026-10-23 strong
tautulli/tautulli 2 adequate · 3 strong Python 639,556 lines 6,618 2026-10-23 strong
django-oscar/django-oscar 4 strong Python 94,057 lines 6,627 2026-10-23 strong
galaxyproject/galaxy 4 adequate · 1 strong Python 1,157,067 lines 1,890 2026-11-03 adequate
roxy-wi/roxy-wi 2 adequate · 3 strong Python 178,738 lines 1,833 2026-11-03 strong
dbt-labs/metricflow 2 adequate · 3 strong Python 1,022,841 lines 1,857 2026-11-03 strong
ossf/cve-bin-tool 2 adequate · 2 strong Python 94,069 lines 1,808 2026-11-03 adequate
lynpoint/cyberverse 2 adequate · 2 strong Python 128,537 lines 1,749 2026-11-03 adequate
superlinked/sie 2 adequate · 3 strong Python 1,030,851 lines 3,476 2026-10-28 strong
commixproject/commix 2 adequate · 1 strong Python 90,039 lines 5,894 2026-10-23 adequate
flagsmith/flagsmith 3 adequate · 2 strong Python 411,043 lines 6,611 2026-10-22 adequate
sqlmesh/sqlmesh 2 adequate · 3 strong Python 338,931 lines 3,335 2026-10-28 strong
owasp/nettacker 2 adequate · 3 strong Python 54,785 lines 5,685 2026-10-23 strong
idealo/imagededup 4 strong Python 18,620 lines 5,679 2026-10-23 adequate
baserow/baserow 4 adequate · 1 strong Python 2,079,599 lines 6,192 2026-10-22 adequate
open-source-legal/opencontracts 4 adequate · 1 strong Python 1,118,493 lines 1,533 2026-11-03 adequate
awarexone/agentic-bug-hunter 2 adequate · 1 strong Python 127,932 lines 5,411 2026-10-23 adequate
zenml-io/zenml 1 adequate · 4 strong Python 597,046 lines 5,624 2026-10-22 strong
s3tools/s3cmd 2 adequate · 1 strong Python 10,583 lines 4,919 2026-10-23 adequate
emissary-ingress/emissary 2 adequate · 3 strong Python 201,565 lines 4,521 2026-10-23 strong
longguikeji/arkid 4 adequate · 1 strong Python 89,054 lines 1,285 2026-11-03 adequate
cert-polska/artemis 3 adequate · 2 strong Python 58,252 lines 1,254 2026-11-03 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.