The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
composiohq/composio 2 adequate · 3 strong TypeScript 500,218 lines 30,941 2026-10-23 strong
heartcombo/devise 3 strong Ruby 19,184 lines 24,355 2026-10-25 adequate
teamwiseflow/xiaobei 4 adequate · 1 strong Python 130,977 lines 8,684 2026-11-03 adequate
k3s-io/k3s 3 adequate · 2 strong Go 84,520 lines 34,238 2026-10-22 adequate
tiddlywiki/tiddlywiki5 4 adequate · 1 strong JavaScript 116,000 lines 8,698 2026-11-03 adequate
stranslate/stranslate 3 adequate · 1 strong C# 61,160 lines 8,505 2026-11-03 adequate
navidrome/navidrome 2 adequate · 3 strong Go 322,101 lines 23,847 2026-10-25 strong
deckerst/aves 3 adequate · 1 strong Dart 149,223 lines 5,490 2026-11-07 adequate
statelyai/xstate 1 adequate · 3 strong TypeScript 122,357 lines 30,348 2026-10-23 strong
iv-org/invidious 3 adequate · 2 strong Crystal 58,409 lines 24,832 2026-10-25 adequate
getanteon/anteon 2 adequate · 3 strong Go 25,709 lines 8,514 2026-11-03 strong
better-auth/better-auth 2 adequate · 3 strong TypeScript 527,560 lines 30,440 2026-10-23 strong
mihonapp/mihon 3 adequate · 1 strong Kotlin 98,241 lines 23,916 2026-10-25 adequate
rmosolgo/graphql-ruby 1 adequate · 3 strong Ruby 491,573 lines 5,445 2026-11-07 strong
dubinc/dub 3 adequate · 2 strong TypeScript 544,812 lines 24,827 2026-10-25 adequate
simstudioai/sim 4 adequate · 1 strong TypeScript 2,097,460 lines 29,991 2026-10-23 adequate
glpi-project/glpi 1 adequate · 4 strong PHP 1,843,812 lines 6,560 2026-11-05 strong
pycqa/bandit 1 adequate · 3 strong Python 27,519 lines 8,369 2026-11-03 strong
metallb/metallb 3 adequate · 2 strong Go 166,100 lines 8,393 2026-11-03 adequate
zilliztech/deep-searcher 2 adequate · 3 strong Python 25,355 lines 8,367 2026-11-03 strong
argoproj/argo-cd 3 adequate · 2 strong Go 879,458 lines 24,240 2026-10-25 adequate
kyverno/kyverno 2 adequate · 3 strong Go 618,744 lines 8,313 2026-11-03 strong
basecamp/fizzy 1 adequate · 4 strong Ruby 83,269 lines 8,282 2026-11-03 strong
suitenumerique/docs 1 adequate · 4 strong Python 177,768 lines 16,953 2026-10-28 strong
ossrs/srs 4 adequate · 1 strong C++ 1,656,255 lines 29,365 2026-10-23 adequate
prefecthq/prefect 2 adequate · 3 strong Python 946,356 lines 23,936 2026-10-25 strong
temporalio/temporal 2 adequate · 3 strong Go 1,085,954 lines 23,317 2026-10-25 strong
requarks/wiki 3 adequate · 2 strong TypeScript 499,188 lines 29,079 2026-10-23 adequate
signoz/signoz 3 adequate · 2 strong TypeScript 1,323,026 lines 32,428 2026-10-22 adequate
rails/thor 3 strong Ruby 14,703 lines 5,262 2026-11-07 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.