The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
rancher/rancher 3 adequate · 2 strong Go 735,297 lines 25,997 2026-10-22 adequate
goauthentik/authentik 2 adequate · 3 strong Python 661,040 lines 26,050 2026-10-22 strong
oomol-lab/pdf-craft 2 adequate · 2 strong Python 117,364 lines 6,481 2026-11-03 adequate
jaegertracing/jaeger 2 adequate · 3 strong Go 293,274 lines 23,332 2026-10-23 strong
oban-bg/oban 1 adequate · 3 strong Elixir 26,673 lines 3,985 2026-11-07 strong
lichess-org/lila 2 adequate · 3 strong Scala 304,839 lines 18,773 2026-10-25 strong
pulumi/pulumi 2 adequate · 2 strong Go 2,142,280 lines 25,806 2026-10-22 adequate
ccfos/nightingale 2 adequate · 3 strong Go 605,725 lines 13,401 2026-10-28 strong
openhealthforall/open-health 3 adequate · 2 strong TypeScript 16,121 lines 3,966 2026-11-07 adequate
comet-ml/opik 4 adequate · 1 strong Python 1,701,022 lines 22,852 2026-10-23 adequate
dream-num/univer 1 adequate · 3 strong TypeScript 1,301,255 lines 22,736 2026-10-23 strong
chaitin/safeline 5 adequate Go 26,650 lines 22,918 2026-10-23 adequate
ontos-ai/knowhere 2 adequate · 3 strong Python 252,704 lines 3,893 2026-11-07 strong
apache/rocketmq 1 adequate · 2 strong Java 420,810 lines 22,644 2026-10-23 adequate
materializeinc/materialize 3 adequate · 2 strong Rust 1,808,273 lines 6,392 2026-11-03 adequate
pallets/click 4 strong Python 39,748 lines 17,770 2026-10-25 strong
thelounge/thelounge 2 adequate · 3 strong TypeScript 44,597 lines 6,364 2026-11-03 strong
aisingapore/tagui 2 adequate · 2 strong PHP 32,904 lines 6,340 2026-11-03 adequate
goodrain/rainbond 3 adequate · 2 strong Go 288,206 lines 6,293 2026-11-03 adequate
bfenetworks/bfe 3 adequate · 2 strong Go 291,829 lines 6,272 2026-11-03 adequate
kubernetes/kube-state-metrics 1 adequate · 4 strong Go 50,382 lines 6,234 2026-11-03 strong
datahub-project/datahub 4 adequate · 1 strong Python 1,931,589 lines 12,909 2026-10-28 adequate
aimhubio/aim 4 adequate · 1 strong Python 152,228 lines 6,291 2026-11-03 adequate
helicone/helicone 3 adequate · 2 strong TypeScript 533,770 lines 6,257 2026-11-03 adequate
openobserve/openobserve 1 adequate · 4 strong TypeScript 2,111,872 lines 22,474 2026-10-23 strong
helixdb/helix-db 2 adequate · 3 strong Rust 760,616 lines 6,267 2026-11-03 adequate
browser-act/skills 2 adequate · 1 strong Python 34,024 lines 6,315 2026-11-03 adequate
windmill-labs/windmill 2 adequate · 3 strong Rust 1,548,413 lines 18,070 2026-10-25 strong
generalaction/emdash 1 adequate · 4 strong TypeScript 717,818 lines 6,171 2026-11-03 strong
plotjuggler/plotjuggler 2 adequate · 1 strong C++ 382,417 lines 6,285 2026-11-03 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.