The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
akaunting/akaunting 2 adequate · 2 strong PHP 283,087 lines 10,153 2026-10-25 adequate
ory/oathkeeper 2 adequate · 3 strong Go 90,646 lines 3,608 2026-11-03 strong
argoproj/argo-rollouts 2 adequate · 3 strong Go 270,335 lines 3,616 2026-11-03 strong
zilliztech/claude-context 2 adequate · 2 strong TypeScript 25,289 lines 12,644 2026-10-23 adequate
websoft9/websoft9 5 adequate TypeScript 183,843 lines 2,132 2026-11-08 adequate
linkerd/linkerd2-proxy 2 adequate · 2 strong Rust 106,971 lines 2,146 2026-11-08 adequate
juggleim/im-server 3 adequate · 2 strong Go 96,676 lines 3,538 2026-11-03 adequate
openvidu/openvidu 3 adequate · 2 strong TypeScript 98,179 lines 2,138 2026-11-08 adequate
authorizerdev/authorizer 2 adequate · 3 strong Go 228,170 lines 2,117 2026-11-08 strong
plankanban/planka 4 adequate · 1 strong JavaScript 142,784 lines 12,635 2026-10-23 adequate
infracost/infracost 2 adequate · 2 strong Go 247,713 lines 12,584 2026-10-23 adequate
encoredev/encore 2 adequate · 3 strong Go 346,649 lines 12,523 2026-10-23 strong
bentoml/openllm 4 strong Python 3,461 lines 12,563 2026-10-23 strong
rabbitmq/rabbitmq-server 2 adequate · 2 strong JavaScript 637,210 lines 13,937 2026-10-22 adequate
vesoft-inc/nebula 1 adequate · 4 strong C++ 427,390 lines 12,443 2026-10-23 strong
keephq/keep 3 adequate · 2 strong Python 252,879 lines 12,435 2026-10-23 adequate
lance-format/lance 1 adequate · 3 strong Rust 1,273,332 lines 7,224 2026-10-28 strong
mlogclub/bbs-go 3 adequate · 2 strong TypeScript 89,827 lines 3,500 2026-11-03 adequate
lmnr-ai/lmnr 4 adequate · 1 strong TypeScript 787,004 lines 3,472 2026-11-03 adequate
getumbrel/umbrel 4 adequate · 1 strong TypeScript 389,357 lines 12,441 2026-10-23 adequate
deepstreamio/deepstream.io 5 adequate TypeScript 32,889 lines 7,181 2026-10-28 adequate
zarf-dev/zarf 3 adequate · 2 strong Go 236,718 lines 2,082 2026-11-08 adequate
humanizr/humanizer 1 adequate · 3 strong C# 552,444 lines 9,908 2026-10-25 strong
starrocks/starrocks 4 strong Java 1,865,332 lines 12,202 2026-10-23 strong
bytewax/bytewax 3 adequate · 2 strong Python 52,796 lines 2,070 2026-11-08 adequate
matterwiki/matterwiki 3 adequate · 1 strong JavaScript 4,536 lines 2,093 2026-11-08 adequate
gitpod-io/gitpod 2 adequate · 3 strong TypeScript 920,976 lines 13,805 2026-10-22 strong
reactioncommerce/reaction 1 adequate · 4 strong JavaScript 190,064 lines 12,399 2026-10-23 adequate
future-architect/vuls 3 adequate · 2 strong Go 121,626 lines 12,300 2026-10-23 adequate
saltcorn/saltcorn 2 adequate · 3 strong JavaScript 414,546 lines 2,089 2026-11-07 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.