The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
trpc/trpc 1 adequate · 4 strong TypeScript 180,519 lines 40,667 2026-10-25 strong
the-pr-agent/pr-agent 4 adequate · 2 strong Python 224,506 lines 14,267 2026-11-03 adequate
schollz/croc 3 adequate · 2 strong Go 83,381 lines 40,474 2026-10-25 adequate
safing/portmaster 1 significant · 4 adequate · 1 strong Go 208,941 lines 14,019 2026-11-03 significant findings
gofiber/fiber 2 adequate · 4 strong Go 203,724 lines 40,186 2026-10-25 strong
orchestratorinc/agent-orchestrator 2 adequate · 4 strong Go 1,330,654 lines 14,044 2026-11-03 strong
qbittorrent/qbittorrent 4 adequate · 1 strong C++ 209,125 lines 40,459 2026-10-25 adequate
photoprism/photoprism 2 adequate · 4 strong Go 669,951 lines 40,238 2026-10-25 adequate
lapce/lapce 3 adequate · 2 strong Rust 74,599 lines 38,868 2026-10-25 adequate
outline/outline 3 adequate · 3 strong TypeScript 417,213 lines 40,701 2026-10-25 adequate
nushell/nushell 1 adequate · 4 strong Rust 482,405 lines 40,580 2026-10-25 strong
dnscrypt/dnscrypt-proxy 1 significant · 4 adequate · 1 strong Go 24,544 lines 13,808 2026-11-03 significant findings
ajeetdsouza/zoxide 2 strong Rust 7,656 lines 39,711 2026-10-25 adequate
koalaman/shellcheck 2 adequate · 2 strong Haskell 23,599 lines 40,090 2026-10-25 adequate
bloopai/vibe-kanban 4 adequate · 2 strong Rust 276,167 lines 28,484 2026-10-28 adequate
prometheus/node_exporter 2 adequate · 4 strong Go 53,643 lines 13,893 2026-11-03 strong
directus/directus 4 adequate · 2 strong TypeScript 689,516 lines 38,722 2026-10-25 adequate
keygraphhq/shannon 4 adequate · 2 strong TypeScript 66,267 lines 49,255 2026-10-23 adequate
teamnewpipe/newpipe 3 adequate · 2 strong Java 134,421 lines 39,825 2026-10-25 adequate
nextauthjs/next-auth 4 adequate · 2 strong TypeScript 64,348 lines 28,373 2026-10-28 adequate
rook/rook 3 adequate · 3 strong Go 304,456 lines 13,700 2026-11-03 adequate
aseprite/aseprite 3 adequate · 2 strong C++ 283,290 lines 39,784 2026-10-25 adequate
metersphere/metersphere 5 adequate · 1 strong Java 672,013 lines 13,607 2026-11-03 adequate
httpie/cli 2 adequate · 2 strong Python 26,408 lines 38,597 2026-10-25 adequate
sharex/sharex 2 adequate · 2 strong C# 264,938 lines 39,756 2026-10-25 adequate
diaspora/diaspora 2 adequate · 3 strong Ruby 186,587 lines 13,653 2026-11-03 strong
jeecgboot/jeecgboot 6 adequate Java 528,787 lines 48,269 2026-10-23 adequate
rikkahub/rikkahub 3 adequate · 2 strong Kotlin 257,729 lines 8,695 2026-11-07 adequate
gogs/gogs 4 adequate · 2 strong Go 247,120 lines 47,897 2026-10-23 adequate
jupyter/notebook 1 adequate · 4 strong Jupyter Notebook 22,884 lines 13,458 2026-11-03 adequate

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.