The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
jenkinsci/jenkins 2 adequate · 3 strong Java 570,024 lines 26,726 2026-10-25 strong
certimate-go/certimate 4 adequate · 1 strong Go 193,084 lines 9,422 2026-11-03 adequate
onyx-dot-app/onyx 2 adequate · 3 strong Python 1,826,289 lines 33,234 2026-10-23 strong
databendlabs/databend 3 adequate · 2 strong Rust 1,303,500 lines 9,491 2026-11-03 adequate
librehardwaremonitor/librehardwaremonitor 1 adequate · 3 strong C# 79,650 lines 9,335 2026-11-03 strong
topoteretes/cognee 2 adequate · 3 strong Python 690,790 lines 32,699 2026-10-23 strong
getzep/graphiti 3 adequate · 2 strong Python 97,478 lines 32,166 2026-10-23 adequate
activerecord-hackery/ransack 3 strong Ruby 25,013 lines 5,858 2026-11-07 adequate
monicahq/monica 3 adequate · 2 strong PHP 220,725 lines 25,362 2026-10-25 adequate
spotify/luigi 4 strong Python 71,455 lines 18,782 2026-10-28 strong
continuedev/continue 3 adequate · 2 strong TypeScript 420,952 lines 36,290 2026-10-22 adequate
seaweedfs/seaweedfs 4 adequate · 1 strong Go 1,161,579 lines 35,929 2026-10-22 adequate
artilleryio/artillery 2 adequate · 2 strong TypeScript 67,827 lines 9,111 2026-11-03 adequate
dragonflydb/dragonfly 2 adequate · 3 strong C++ 348,384 lines 31,816 2026-10-23 strong
conductor-oss/conductor 2 adequate · 3 strong Java 651,663 lines 32,371 2026-10-23 strong
projectdiscovery/nuclei 4 adequate · 1 strong Go 199,880 lines 32,261 2026-10-23 adequate
codenotary/immudb 2 adequate · 3 strong Go 270,603 lines 9,049 2026-11-03 strong
dokku/dokku 2 adequate · 3 strong Go 142,420 lines 32,202 2026-10-23 strong
delta-io/delta 2 adequate · 3 strong Scala 697,961 lines 9,066 2026-11-03 strong
karatelabs/karate 4 strong Java 282,781 lines 9,003 2026-11-03 strong
vapor/vapor 1 adequate · 2 strong Swift 44,468 lines 26,223 2026-10-25 adequate
corebunch/instatic 2 adequate · 3 strong TypeScript 501,819 lines 9,052 2026-11-03 strong
fission/fission 3 adequate · 2 strong Go 269,456 lines 8,939 2026-11-03 adequate
zulip/zulip 3 adequate · 2 strong Python 1,165,155 lines 25,951 2026-10-25 adequate
influxdata/influxdb 1 adequate · 4 strong Rust 420,633 lines 31,780 2026-10-23 strong
mjmlio/mjml 1 adequate · 3 strong JavaScript 18,845 lines 18,284 2026-10-28 strong
webtorrent/webtorrent 3 adequate · 2 strong JavaScript 15,472 lines 31,447 2026-10-23 adequate
firefly-iii/firefly-iii 2 adequate · 2 strong PHP 269,698 lines 24,785 2026-10-25 adequate
shardeum/shardeum 1 adequate · 3 strong TypeScript 81,075 lines 31,185 2026-10-23 adequate
radareorg/radare2 2 adequate · 2 strong C 1,205,860 lines 24,908 2026-10-25 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.