The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
ravendb/ravendb 2 adequate · 3 strong C# 1,948,386 lines 4,014 2026-11-03 strong
jhy/jsoup 3 strong Java 66,660 lines 11,402 2026-10-25 adequate
kumahq/kuma 3 adequate · 2 strong Go 790,571 lines 4,015 2026-11-03 adequate
nanobrowser/nanobrowser 1 adequate · 3 strong TypeScript 82,608 lines 14,163 2026-10-23 strong
kyantech/palmr 4 adequate · 1 strong TypeScript 111,183 lines 2,395 2026-11-08 adequate
documize/community 2 adequate · 3 strong JavaScript 201,640 lines 2,425 2026-11-07 strong
mrkai77/loop 3 adequate · 1 strong Swift 36,815 lines 11,707 2026-10-25 adequate
hashicorp/packer 2 adequate · 2 strong Go 95,277 lines 15,812 2026-10-22 adequate
automatisch/automatisch 2 adequate · 3 strong JavaScript 152,769 lines 14,000 2026-10-23 strong
apache/shardingsphere-elasticjob 1 adequate · 2 strong Java 74,591 lines 8,197 2026-10-28 adequate
lektor/lektor 4 strong Python 40,552 lines 3,949 2026-11-03 strong
dnscontrol/dnscontrol 1 adequate · 3 strong Go 271,662 lines 3,993 2026-11-03 strong
browserbox/browserbox 3 adequate Shell 17,334 lines 3,931 2026-11-03 adequate
fluent/fluent-bit 4 adequate · 1 strong C 2,468,208 lines 8,174 2026-10-28 adequate
siteserver/cms 2 adequate · 3 strong JavaScript 387,461 lines 3,918 2026-11-03 strong
home-assistant/ios 2 adequate · 3 strong Swift 332,835 lines 2,367 2026-11-08 strong
emdash-cms/emdash 3 adequate · 2 strong TypeScript 1,271,053 lines 13,904 2026-10-23 adequate
piwigo/piwigo 2 adequate · 1 strong PHP 370,686 lines 3,881 2026-11-03 adequate
omniauth/omniauth 1 adequate · 2 strong Ruby 8,251 lines 8,106 2026-10-28 adequate
opensearch-project/opensearch 3 adequate · 2 strong Java 1,960,045 lines 13,900 2026-10-23 adequate
nextapps-de/flexsearch 2 adequate · 3 strong JavaScript 65,916 lines 13,810 2026-10-23 strong
pinpoint-apm/pinpoint 1 adequate · 3 strong Java 848,765 lines 13,870 2026-10-23 strong
tracecathq/tracecat 4 adequate · 1 strong Python 1,333,224 lines 3,887 2026-11-03 adequate
cilium/pwru 5 adequate C 112,818 lines 3,847 2026-11-03 adequate
supertokens/supertokens-core 2 adequate · 2 strong Java 255,454 lines 15,333 2026-10-22 adequate
1backend/1backend 3 adequate · 2 strong Go 284,568 lines 2,355 2026-11-07 adequate
ruby-china/homeland 2 adequate · 3 strong Ruby 26,563 lines 3,859 2026-11-03 strong
domoticz/domoticz 2 adequate · 3 strong C++ 481,546 lines 3,829 2026-11-03 strong
fluent/fluentd 4 strong Ruby 124,651 lines 13,611 2026-10-23 strong
puckeditor/puck 1 adequate · 3 strong TypeScript 49,192 lines 13,515 2026-10-23 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.