The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
dgraph-io/dgraph 3 adequate · 3 strong Go 333,436 lines 21,821 2026-11-07 adequate
stirling-tools/stirling-pdf 4 adequate · 2 strong Java 1,311,983 lines 93,291 2026-10-25 adequate
carguo/gsyvideoplayer 3 adequate · 1 strong Java 88,009 lines 21,528 2026-11-07 adequate
fincept-corporation/finceptterminal 1 significant · 3 adequate · 1 strong C++ 908,790 lines 33,370 2026-11-03 significant findings
browser-use/browser-use 3 adequate · 3 strong Python 127,930 lines 118,963 2026-10-23 adequate
vxcontrol/pentagi 1 significant · 3 adequate · 2 strong Go 527,143 lines 33,140 2026-11-03 significant findings
w-okada/voice-changer 3 adequate · 2 strong Python 60,574 lines 21,302 2026-11-07 adequate
allinurl/goaccess 3 adequate · 1 strong C 53,855 lines 21,119 2026-11-07 adequate
localsend/localsend 1 significant · 3 adequate · 2 strong Dart 223,240 lines 92,758 2026-10-25 significant findings
cloakhq/cloakbrowser 1 significant · 2 adequate · 3 strong Python 70,380 lines 32,707 2026-11-03 significant findings
astral-sh/uv 2 adequate · 3 strong Rust 579,805 lines 90,174 2026-10-25 strong
avajs/ava 1 significant · 2 adequate · 2 strong JavaScript 32,563 lines 20,828 2026-11-07 significant findings
gohugoio/hugo 3 adequate · 3 strong Go 320,168 lines 89,961 2026-10-25 adequate
syncthing/syncthing 4 adequate · 2 strong Go 162,965 lines 90,121 2026-10-25 adequate
gin-gonic/gin 5 strong Go 29,423 lines 89,259 2026-10-25 strong
django/django 1 adequate · 4 strong Python 720,200 lines 91,182 2026-10-25 strong
nanocoai/nanoclaw 2 adequate · 4 strong TypeScript 240,352 lines 31,076 2026-11-03 strong
paperclipai/paperclip 4 adequate · 2 strong TypeScript 1,907,436 lines 111,349 2026-10-23 adequate
lionsoul2014/ip2region 1 adequate · 3 strong Go 34,637 lines 19,851 2026-11-07 strong
trailofbits/algo 1 significant · 2 adequate · 3 strong Python 21,202 lines 30,449 2026-11-03 significant findings
keploy/keploy 3 adequate · 3 strong Go 686,017 lines 19,518 2026-11-07 adequate
ccusage/ccusage 1 adequate · 2 strong Rust 97,153 lines 19,353 2026-11-07 adequate
opendataloader-project/opendataloader-pdf 1 significant · 4 strong Java 87,492 lines 30,164 2026-11-03 significant findings
laravel/laravel 5 strong Blade 2,674 lines 85,007 2026-10-25 strong
junegunn/fzf 1 adequate · 3 strong Go 54,765 lines 83,258 2026-10-25 strong
lobehub/lobehub 5 adequate · 1 strong TypeScript 1,864,469 lines 82,950 2026-10-25 adequate
vitejs/vite 3 adequate · 3 strong TypeScript 142,704 lines 83,055 2026-10-25 adequate
gitbookio/gitbook 2 adequate · 3 strong TypeScript 133,833 lines 29,086 2026-11-03 strong
kitao/pyxel 3 adequate · 1 strong Rust 61,851 lines 18,557 2026-11-07 adequate
koodo-reader/koodo-reader 5 adequate JavaScript 179,044 lines 28,708 2026-11-03 adequate

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.