The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
lancedb/lancedb 1 adequate · 4 strong Rust 307,285 lines 11,754 2026-10-23 strong
pipedreamhq/pipedream 3 adequate · 1 strong JavaScript 1,761,825 lines 11,757 2026-10-23 adequate
vriteio/andesine 4 adequate · 1 strong TypeScript 510,965 lines 2,005 2026-11-08 adequate
owncast/owncast 1 adequate · 4 strong Go 192,134 lines 11,624 2026-10-23 strong
major/mysqltuner-perl 1 adequate · 3 strong Perl 46,405 lines 9,480 2026-10-25 strong
cyclops-ui/cyclops 4 adequate · 1 strong Go 48,593 lines 3,320 2026-11-03 adequate
vinceanalytics/vince 4 adequate · 1 strong Go 27,231 lines 2,010 2026-11-07 adequate
kanaries/graphic-walker 1 adequate · 3 strong TypeScript 57,148 lines 3,286 2026-11-03 strong
gladysassistant/gladys 3 adequate · 2 strong JavaScript 570,115 lines 3,269 2026-11-03 adequate
featureform/featureform 2 adequate · 3 strong Go 189,948 lines 1,991 2026-11-08 adequate
openreplay/openreplay 4 adequate · 1 strong TypeScript 473,270 lines 13,032 2026-10-22 adequate
anchore/grype 3 adequate · 1 strong Go 203,369 lines 13,087 2026-10-22 adequate
debug-js/debug 2 strong JavaScript 1,665 lines 11,458 2026-10-23 adequate
storj/storj 2 adequate · 3 strong Go 834,667 lines 3,284 2026-11-03 strong
vouch/vouch-proxy 1 adequate · 4 strong Go 9,985 lines 3,281 2026-11-03 strong
openstatushq/openstatus 3 adequate · 2 strong TypeScript 728,788 lines 9,160 2026-10-25 adequate
open-telemetry/opentelemetry-go 2 adequate · 2 strong Go 986,048 lines 6,585 2026-10-28 adequate
papermark/papermark 3 adequate · 1 strong TypeScript 261,851 lines 9,215 2026-10-25 adequate
mercurjs/mercur 3 adequate · 2 strong TypeScript 555,380 lines 1,882 2026-11-08 adequate
octoprint/octoprint 1 adequate · 3 strong Python 225,605 lines 9,117 2026-10-25 strong
open-mercato/open-mercato 2 adequate · 3 strong TypeScript 1,802,973 lines 1,881 2026-11-08 strong
heavyai/heavydb 2 adequate · 3 strong C++ 869,449 lines 3,120 2026-11-03 strong
kedro-org/kedro 1 adequate · 4 strong Python 91,632 lines 11,031 2026-10-23 strong
bagisto/nextjs-commerce 3 adequate · 1 strong TypeScript 33,970 lines 6,432 2026-10-28 adequate
daptin/daptin 3 adequate · 2 strong Go 249,874 lines 1,898 2026-11-07 adequate
vuecomponent/ant-design-vue-pro 3 adequate · 1 strong Vue 20,657 lines 10,920 2026-10-23 adequate
sanity-io/sanity 3 adequate · 1 strong TypeScript 832,408 lines 6,377 2026-10-28 adequate
hapifhir/hapi-fhir 1 adequate · 3 strong Java 1,853,437 lines 2,427 2026-11-05 strong
swirlai/swirl-search 3 adequate · 2 strong Python 44,759 lines 3,051 2026-11-03 adequate
dtm-labs/dtm 2 adequate · 3 strong Go 21,491 lines 10,923 2026-10-23 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.