The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
serde-rs/serde 1 adequate · 2 strong Rust 43,784 lines 10,831 2026-10-25 adequate
cocoalumberjack/cocoalumberjack 3 strong Objective-C 44,885 lines 13,318 2026-10-23 adequate
portkey-ai/gateway 4 adequate · 1 strong TypeScript 107,020 lines 13,259 2026-10-23 adequate
tstack/lnav 3 adequate · 2 strong C++ 480,460 lines 10,716 2026-10-25 adequate
polyaxon/polyaxon 3 adequate MDX 3,131 lines 3,748 2026-11-03 adequate
langchain4j/langchain4j 4 strong Java 687,385 lines 13,288 2026-10-23 strong
debezium/debezium 2 adequate · 2 strong Java 642,270 lines 13,266 2026-10-23 adequate
webhintio/hint 1 adequate · 3 strong TypeScript 177,194 lines 3,701 2026-11-03 strong
akuity/kargo 5 adequate Go 563,773 lines 3,754 2026-11-03 adequate
logto-io/logto 3 adequate · 2 strong TypeScript 639,179 lines 14,750 2026-10-22 adequate
builderio/figma-html 1 adequate · 2 strong TypeScript 954 lines 3,713 2026-11-03 adequate
neuml/txtai 1 adequate · 3 strong Python 63,035 lines 13,029 2026-10-23 strong
getlago/lago 5 adequate Go 16,657 lines 10,627 2026-10-25 adequate
natlabrockies/api-umbrella 1 adequate · 3 strong Ruby 111,781 lines 2,203 2026-11-08 strong
seerr-team/seerr 4 adequate · 1 strong TypeScript 191,027 lines 13,005 2026-10-23 adequate
alicevision/meshroom 3 adequate · 2 strong Python 82,777 lines 13,038 2026-10-23 adequate
deta/surf 2 adequate · 2 strong TypeScript 144,831 lines 3,617 2026-11-03 adequate
luckypennysoftware/automapper 1 adequate · 3 strong C# 69,995 lines 10,187 2026-10-25 adequate
openbyteinc/quantdinger 3 adequate · 2 strong Python 294,472 lines 13,049 2026-10-23 adequate
akaunting/akaunting 2 adequate · 2 strong PHP 283,087 lines 10,153 2026-10-25 adequate
ory/oathkeeper 2 adequate · 3 strong Go 90,646 lines 3,608 2026-11-03 strong
argoproj/argo-rollouts 2 adequate · 3 strong Go 270,335 lines 3,616 2026-11-03 strong
zilliztech/claude-context 2 adequate · 2 strong TypeScript 25,289 lines 12,644 2026-10-23 adequate
websoft9/websoft9 5 adequate TypeScript 183,843 lines 2,132 2026-11-08 adequate
linkerd/linkerd2-proxy 2 adequate · 2 strong Rust 106,971 lines 2,146 2026-11-08 adequate
juggleim/im-server 3 adequate · 2 strong Go 96,676 lines 3,538 2026-11-03 adequate
openvidu/openvidu 3 adequate · 2 strong TypeScript 98,179 lines 2,138 2026-11-08 adequate
authorizerdev/authorizer 2 adequate · 3 strong Go 228,170 lines 2,117 2026-11-08 strong
plankanban/planka 4 adequate · 1 strong JavaScript 142,784 lines 12,635 2026-10-23 adequate
infracost/infracost 2 adequate · 2 strong Go 247,713 lines 12,584 2026-10-23 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.