The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
winsiderss/systeminformer 2 adequate · 2 strong C 1,564,958 lines 16,315 2026-10-23 adequate
authpass/authpass 4 adequate Dart 89,206 lines 2,805 2026-11-07 adequate
paymenter/paymenter 4 adequate · 1 strong PHP 71,207 lines 2,819 2026-11-07 adequate
polynote/polynote 4 adequate · 1 strong Jupyter Notebook 56,118 lines 4,596 2026-11-03 adequate
medplum/medplum 2 adequate · 3 strong TypeScript 1,057,184 lines 2,778 2026-11-08 strong
prest/prest 1 adequate · 4 strong Go 73,876 lines 4,630 2026-11-03 strong
apache/doris 2 adequate · 3 strong Java 1,828,323 lines 16,133 2026-10-23 strong
paradedb/paradedb 2 adequate · 3 strong Rust 345,084 lines 9,453 2026-10-28 strong
erda-project/erda 4 adequate · 1 strong Go 1,189,849 lines 2,757 2026-11-08 adequate
vibrantlabsai/ragas 3 adequate · 1 strong Python 110,958 lines 16,134 2026-10-23 adequate
raga-ai-hub/ragaai-catalyst 2 adequate · 2 strong Python 47,897 lines 16,179 2026-10-23 adequate
optimalbits/bull 2 adequate · 3 strong JavaScript 20,676 lines 16,257 2026-10-23 strong
bearer/bearer 3 adequate · 2 strong Go 167,299 lines 2,779 2026-11-07 adequate
intuitem/ciso-assistant-community 3 adequate · 2 strong Python 1,584,845 lines 4,571 2026-11-03 adequate
amplication/amplication 3 adequate · 2 strong TypeScript 285,370 lines 16,008 2026-10-23 adequate
typedb/typedb 2 adequate · 3 strong Rust 191,149 lines 4,500 2026-11-03 strong
mosn/mosn 1 adequate · 4 strong Go 266,382 lines 4,507 2026-11-03 strong
playframework/playframework 2 adequate · 3 strong Scala 265,998 lines 12,615 2026-10-25 strong
mattermost/mattermost-mobile 3 adequate · 1 strong TypeScript 570,838 lines 2,726 2026-11-07 adequate
pydantic/logfire 1 adequate · 3 strong Python 182,901 lines 4,530 2026-11-03 strong
outflanknl/redelk 2 adequate · 2 strong Python 40,656 lines 2,684 2026-11-08 adequate
fleetbase/fleetbase 3 adequate · 2 strong JavaScript 84,265 lines 4,498 2026-11-03 adequate
sinatra/sinatra 3 strong Ruby 30,701 lines 12,453 2026-10-25 adequate
ory/hydra 3 adequate · 1 strong Go 303,323 lines 17,624 2026-10-22 adequate
rubocop/rubocop 4 strong Ruby 406,900 lines 12,908 2026-10-25 strong
apitable/apitable 4 adequate · 1 strong TypeScript 780,846 lines 15,643 2026-10-23 adequate
harnessmd/munder-difflin 2 adequate · 2 strong TypeScript 378,405 lines 9,149 2026-10-28 adequate
gojue/ecapture 3 adequate · 2 strong C 72,767 lines 15,516 2026-10-23 adequate
crate/crate 4 strong Java 858,205 lines 4,450 2026-11-03 strong
crunchydata/postgres-operator 2 adequate · 3 strong Go 124,157 lines 4,456 2026-11-03 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.