The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
prefecthq/prefect 2 adequate · 3 strong Python 946,356 lines 23,936 2026-10-25 strong
temporalio/temporal 2 adequate · 3 strong Go 1,085,954 lines 23,317 2026-10-25 strong
requarks/wiki 3 adequate · 2 strong TypeScript 499,188 lines 29,079 2026-10-23 adequate
signoz/signoz 3 adequate · 2 strong TypeScript 1,323,026 lines 32,428 2026-10-22 adequate
rails/thor 3 strong Ruby 14,703 lines 5,262 2026-11-07 adequate
cockroachdb/cockroach 2 adequate · 3 strong Go 2,370,315 lines 32,606 2026-10-22 strong
tutao/tutanota 1 adequate · 3 strong TypeScript 794,648 lines 8,105 2026-11-03 strong
knadh/listmonk 5 adequate Go 85,144 lines 23,587 2026-10-25 adequate
reflex-dev/reflex 2 adequate · 3 strong Python 467,491 lines 28,977 2026-10-23 strong
repowise-dev/repowise 2 adequate · 3 strong Python 1,688,885 lines 8,120 2026-11-03 strong
filosottile/age 1 adequate · 3 strong Go 13,918 lines 23,752 2026-10-25 strong
longhorn/longhorn 2 adequate · 2 strong Shell 79,599 lines 8,051 2026-11-03 adequate
saleor/saleor 3 adequate · 2 strong Python 877,042 lines 23,509 2026-10-25 adequate
phoenixframework/phoenix 1 adequate · 4 strong Elixir 77,467 lines 23,172 2026-10-25 strong
cloudreve/cloudreve 5 adequate Go 163,302 lines 28,873 2026-10-23 adequate
ottermind/chat2db 2 adequate · 3 strong Java 505,964 lines 28,331 2026-10-23 strong
grafana/k6 5 strong Go 275,771 lines 32,010 2026-10-22 strong
getredash/redash 3 adequate · 2 strong Python 105,080 lines 28,845 2026-10-23 adequate
cisofy/lynis 1 adequate · 3 strong Shell 5,446 lines 16,576 2026-10-28 strong
snapcast/snapcast 4 adequate · 1 strong C++ 73,262 lines 8,042 2026-11-03 adequate
usefathom/fathom 4 adequate · 1 strong Go 8,780 lines 8,034 2026-11-03 adequate
steel-dev/steel-browser 2 adequate · 3 strong TypeScript 54,989 lines 7,916 2026-11-03 strong
evidentlyai/evidently 4 adequate · 1 strong Jupyter Notebook 138,954 lines 8,032 2026-11-03 adequate
kubevela/kubevela 3 adequate · 2 strong Go 547,074 lines 7,920 2026-11-03 adequate
bagisto/bagisto 2 adequate · 3 strong PHP 584,647 lines 28,271 2026-10-23 strong
hulaspark/hula 2 adequate · 2 strong Vue 168,421 lines 7,796 2026-11-03 adequate
concourse/concourse 3 adequate · 2 strong Go 481,544 lines 7,941 2026-11-03 adequate
hacs/integration 2 adequate · 2 strong Python 40,087 lines 7,869 2026-11-03 adequate
teableio/teable 3 adequate · 2 strong TypeScript 1,458,621 lines 21,849 2026-10-25 adequate
flyteorg/flyte 4 adequate · 1 strong Go 611,810 lines 7,845 2026-11-03 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.