The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
jesseduffield/lazygit 2 adequate · 3 strong Go 180,850 lines 82,672 2026-10-25 strong
doitsujin/dxvk 2 adequate · 1 strong C++ 181,686 lines 18,437 2026-11-07 adequate
eythaann/seelen-ui 3 adequate · 1 strong Rust 176,254 lines 18,363 2026-11-07 adequate
gnachman/iterm2 4 adequate · 1 strong Swift 1,336,872 lines 18,260 2026-11-07 adequate
twentyhq/twenty 4 adequate · 2 strong TypeScript 1,827,816 lines 59,954 2026-10-28 adequate
floci-io/floci 3 adequate · 3 strong Java 1,693,546 lines 28,267 2026-11-03 adequate
hoppscotch/hoppscotch 5 adequate · 1 strong TypeScript 399,641 lines 80,511 2026-10-25 adequate
nestjs/nest 2 adequate · 3 strong TypeScript 177,709 lines 76,747 2026-10-25 strong
hypit-ai/hypit 4 adequate · 2 strong TypeScript 188,034 lines 27,688 2026-11-03 adequate
bkaradzic/bgfx 1 adequate · 2 strong C++ 1,292,126 lines 17,624 2026-11-07 adequate
ocornut/imgui 2 adequate · 2 strong C++ 116,210 lines 76,437 2026-10-25 adequate
onlook-dev/onlook 1 significant · 3 adequate · 2 strong TypeScript 184,925 lines 27,094 2026-11-03 significant findings
appflowy-io/appflowy 2 adequate · 3 strong Dart 514,241 lines 76,942 2026-10-25 strong
redis/redis 2 adequate · 4 strong C 549,207 lines 76,478 2026-10-25 strong
grafana/grafana 6 adequate TypeScript 2,241,114 lines 77,718 2026-10-25 adequate
caddyserver/caddy 1 adequate · 4 strong Go 116,020 lines 76,094 2026-10-25 strong
obsproject/obs-studio 2 adequate · 1 strong C 638,290 lines 76,625 2026-10-25 adequate
pallets/flask 1 adequate · 4 strong Python 19,910 lines 74,779 2026-10-25 adequate
clap-rs/clap 1 adequate · 3 strong Rust 103,662 lines 16,937 2026-11-07 adequate
prestodb/presto 2 adequate · 4 strong Java 1,930,633 lines 16,770 2026-11-07 strong
readest/readest 1 significant · 3 adequate · 2 strong TypeScript 836,775 lines 25,904 2026-11-03 significant findings
infiniflow/ragflow 3 adequate · 3 strong Go 1,383,831 lines 92,747 2026-10-23 adequate
strapi/strapi 1 adequate · 4 strong TypeScript 795,216 lines 73,240 2026-10-25 strong
apache/superset 3 adequate · 3 strong Python 1,778,100 lines 74,921 2026-10-25 adequate
cinnamon/kotaemon 4 adequate · 2 strong Python 58,804 lines 25,872 2026-11-03 adequate
openhands/openhands 2 adequate · 4 strong TypeScript 469,413 lines 91,653 2026-10-23 strong
d2lang/d2 1 significant · 2 adequate · 2 strong Go 1,945,777 lines 25,785 2026-11-03 significant findings
cryptomator/cryptomator 4 adequate · 1 strong Java 75,516 lines 16,460 2026-11-07 adequate
letta-ai/letta 1 adequate · 2 strong — 851 lines 25,331 2026-11-03 adequate
nextai-translator/nextai-translator 3 adequate · 2 strong TypeScript 66,610 lines 25,019 2026-11-03 adequate

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.