The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
atuinsh/atuin 3 adequate · 2 strong Rust 157,273 lines 31,862 2026-10-25 adequate
super-productivity/super-productivity 3 adequate · 2 strong TypeScript 1,184,736 lines 23,207 2026-10-28 adequate
drawdb-io/drawdb 3 adequate · 2 strong JavaScript 53,851 lines 40,116 2026-10-23 adequate
mremoteng/mremoteng 1 adequate · 3 strong C# 172,417 lines 11,187 2026-11-03 strong
bunkerity/bunkerweb 4 adequate · 1 strong Python 2,058,501 lines 11,213 2026-11-03 adequate
openspug/spug 3 adequate · 2 strong JavaScript 37,924 lines 11,101 2026-11-03 adequate
blinkospace/blinko 4 adequate · 1 strong TypeScript 92,021 lines 11,156 2026-11-03 adequate
thedevs-network/kutt 3 adequate · 2 strong JavaScript 10,897 lines 11,188 2026-11-03 adequate
halo-dev/halo 2 adequate · 3 strong Java 389,560 lines 39,970 2026-10-23 strong
2noise/chattts 2 adequate · 2 strong Python 31,768 lines 39,927 2026-10-23 adequate
the-vibe-company/quivr 2 adequate · 3 strong Go 428,793 lines 39,603 2026-10-23 strong
kong/kong 3 adequate · 2 strong Lua 452,581 lines 44,291 2026-10-22 adequate
ray-project/ray 3 adequate · 2 strong Python 1,947,982 lines 44,105 2026-10-22 adequate
vectifyai/pageindex 4 strong Python 53,793 lines 39,549 2026-10-23 strong
avaloniaui/avalonia 4 strong C# 688,814 lines 31,603 2026-10-25 strong
blacklanternsecurity/bbot 1 adequate · 3 strong Python 131,839 lines 10,922 2026-11-03 adequate
sqlmapproject/sqlmap 2 adequate · 2 strong Python 220,386 lines 38,772 2026-10-23 adequate
centrifugal/centrifugo 1 adequate · 4 strong Go 125,526 lines 10,946 2026-11-03 strong
chatchat-space/langchain-chatchat 3 adequate · 2 strong Python 48,380 lines 38,702 2026-10-23 adequate
mail-0/zero 3 adequate · 2 strong TypeScript 141,857 lines 10,878 2026-11-03 adequate
harness/harness 4 adequate · 1 strong Go 661,685 lines 38,682 2026-10-23 adequate
ant-design/ant-design-pro 2 adequate · 2 strong TypeScript 75,053 lines 38,884 2026-10-23 adequate
nginx/nginx 1 adequate · 1 strong C 263,612 lines 31,767 2026-10-25 adequate
triliumnext/trilium 2 adequate · 3 strong TypeScript 1,092,422 lines 38,507 2026-10-23 strong
istio/istio 2 adequate · 3 strong Go 850,268 lines 38,469 2026-10-23 strong
docker/compose 2 adequate · 2 strong Go 100,495 lines 38,439 2026-10-23 adequate
hashicorp/consul 3 adequate · 2 strong Go 900,713 lines 30,088 2026-10-25 adequate
dokploy/dokploy 3 adequate · 2 strong TypeScript 1,408,971 lines 37,974 2026-10-23 adequate
hapelee/legado-with-md3 2 adequate · 2 strong Kotlin 792,714 lines 6,874 2026-11-07 adequate
flameshot-org/flameshot 3 adequate · 1 strong C++ 33,608 lines 31,047 2026-10-25 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.