The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
python-poetry/poetry 2 adequate · 3 strong Python 113,213 lines 34,307 2026-10-25 strong
zellij-org/zellij 4 adequate · 2 strong Rust 354,587 lines 35,585 2026-10-25 adequate
yourls/yourls 1 adequate · 3 strong PHP 29,487 lines 12,298 2026-11-03 strong
qdrant/qdrant 4 adequate · 2 strong Rust 929,010 lines 35,439 2026-10-25 adequate
langfuse/langfuse 2 adequate · 4 strong TypeScript 1,270,259 lines 35,231 2026-10-25 strong
agno-agi/agno 4 adequate · 2 strong Python 1,327,841 lines 42,874 2026-10-23 adequate
usebruno/bruno 3 adequate · 3 strong JavaScript 562,557 lines 47,796 2026-10-22 adequate
mornyeapp/mornye 2 adequate · 2 strong Dart 450,819 lines 7,753 2026-11-07 adequate
kubeshark/kubeshark 4 adequate · 2 strong Go 22,459 lines 12,126 2026-11-03 adequate
tinyhumansai/openhuman 2 adequate · 2 strong Rust 1,477,231 lines 42,253 2026-10-23 adequate
jo-inc/camofox-browser 1 significant · 2 adequate · 3 strong JavaScript 43,073 lines 12,131 2026-11-03 significant findings
gristlabs/grist-core 2 adequate · 4 strong TypeScript 561,872 lines 12,043 2026-11-03 strong
kubescape/kubescape 1 adequate · 5 strong Go 435,437 lines 11,840 2026-11-03 strong
dgtlmoon/changedetection.io 2 adequate · 3 strong Python 102,058 lines 34,682 2026-10-25 strong
tokio-rs/tokio 4 strong Rust 196,074 lines 33,277 2026-10-25 strong
streamlink/streamlink 1 adequate · 3 strong Python 99,833 lines 11,890 2026-11-03 strong
surrealdb/surrealdb 3 adequate · 3 strong Rust 630,012 lines 33,086 2026-10-25 adequate
milvus-io/milvus 2 adequate · 4 strong Go 2,186,085 lines 46,451 2026-10-22 strong
rocketchat/rocket.chat 2 adequate · 4 strong TypeScript 1,267,556 lines 46,294 2026-10-22 strong
codewhale-hq/codewhale 1 significant · 3 adequate · 2 strong Rust 1,559,320 lines 41,157 2026-10-23 significant findings
getagentseal/codeburn 1 significant · 2 adequate · 3 strong TypeScript 387,337 lines 11,670 2026-11-03 significant findings
genspark-ai/genoffice 3 adequate · 3 strong TypeScript 1,395,011 lines 11,629 2026-11-03 adequate
dandavison/delta 3 strong Rust 49,069 lines 32,360 2026-10-25 adequate
grafana/pyroscope 2 adequate · 4 strong Go 530,836 lines 11,711 2026-11-03 strong
filamentphp/filament 3 adequate · 2 strong PHP 615,009 lines 32,142 2026-10-25 adequate
hiddify/hiddify-app 4 adequate · 1 strong Dart 89,326 lines 32,993 2026-10-25 adequate
getsentry/sentry 2 adequate · 3 strong Python 2,321,511 lines 45,628 2026-10-22 strong
certbot/certbot 2 adequate · 3 strong Python 104,561 lines 33,257 2026-10-25 strong
skyvern-ai/skyvern 3 adequate · 3 strong Python 1,712,957 lines 23,290 2026-10-28 adequate
honojs/hono 1 adequate · 4 strong TypeScript 96,209 lines 32,387 2026-10-25 strong

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.