The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
lf-edge/ekuiper 2 adequate · 3 strong Go 305,770 lines 1,747 2026-11-08 strong
moltis-org/moltis 2 adequate · 2 strong Rust 803,386 lines 2,939 2026-11-03 adequate
polarsource/polar 2 adequate · 3 strong Python 1,144,782 lines 10,411 2026-10-23 strong
dograh-hq/dograh 2 adequate · 3 strong Python 356,854 lines 5,972 2026-10-28 strong
htop-dev/htop 1 adequate · 1 strong C 51,845 lines 8,353 2026-10-25 adequate
voidauth/voidauth 4 adequate · 1 strong TypeScript 33,913 lines 2,904 2026-11-03 adequate
hackmdio/codimd 2 adequate · 3 strong JavaScript 28,978 lines 10,158 2026-10-23 adequate
dataplat/dbatools 4 strong PowerShell 376,142 lines 2,858 2026-11-03 strong
cnosdb/cnosdb 2 adequate · 2 strong Rust 161,412 lines 1,754 2026-11-07 adequate
forwardemail/forwardemail.net 4 adequate · 1 strong JavaScript 1,313,913 lines 1,702 2026-11-08 adequate
hatchet-dev/hatchet 3 adequate · 2 strong Go 875,785 lines 8,034 2026-10-25 adequate
wandb/wandb 1 adequate · 4 strong Python 427,201 lines 11,308 2026-10-22 strong
antennapod/antennapod 2 adequate · 2 strong Java 88,268 lines 8,182 2026-10-25 adequate
numaproj/numaflow 4 adequate · 1 strong Rust 337,575 lines 2,837 2026-11-03 adequate
kube-logging/logging-operator 2 adequate · 3 strong Go 192,507 lines 1,716 2026-11-08 strong
lifeforge-app/lifeforge 4 adequate · 1 strong TypeScript 94,241 lines 1,717 2026-11-08 adequate
fossbilling/fossbilling 2 adequate · 3 strong PHP 231,595 lines 1,721 2026-11-07 strong
michalmuskala/jason 1 adequate · 2 strong Elixir 11,778 lines 1,680 2026-11-08 adequate
sparrowcode/permissionskit 2 adequate · 1 strong Swift 1,430 lines 5,810 2026-10-28 adequate
typelevel/skunk 1 adequate · 4 strong Scala 32,054 lines 1,667 2026-11-08 strong
hyperdxio/hyperdx 2 adequate · 3 strong TypeScript 585,897 lines 9,963 2026-10-23 strong
kanboard/kanboard 3 adequate · 2 strong PHP 233,925 lines 9,928 2026-10-23 adequate
ponzu-cms/ponzu 3 adequate · 1 strong Go 26,224 lines 5,759 2026-10-28 adequate
postgres-ai/database-lab-engine 3 adequate · 2 strong Go 133,484 lines 2,786 2026-11-03 adequate
puma/puma 1 adequate · 3 strong Ruby 42,714 lines 7,917 2026-10-25 strong
ctf-wiki/ctf-wiki 3 adequate · 1 strong Python 158,142 lines 9,729 2026-10-23 adequate
masstransit/masstransit 4 strong C# 434,520 lines 7,802 2026-10-25 strong
rustls/rustls 1 adequate · 2 strong Rust 88,522 lines 7,647 2026-10-25 adequate
supabase/realtime 2 adequate · 3 strong Elixir 116,133 lines 7,644 2026-10-25 strong
checkmarx/kics 3 adequate · 2 strong Open Policy Agent 976,910 lines 2,730 2026-11-03 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.