The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
peergos/peergos 2 adequate · 1 strong Java 201,099 lines 2,548 2026-11-03 adequate
jolibrain/deepdetect 3 adequate · 1 strong C++ 150,976 lines 2,551 2026-11-03 adequate
supabase/auth 5 strong Go 116,528 lines 2,592 2026-11-03 strong
maximhq/bifrost 3 adequate · 2 strong Go 1,695,599 lines 9,051 2026-10-23 adequate
open-source-legal/opencontracts 4 adequate · 1 strong Python 1,118,493 lines 1,533 2026-11-08 adequate
sismics/docs 4 adequate · 1 strong JavaScript 118,907 lines 2,574 2026-11-03 adequate
semaphoreio/semaphore 3 adequate · 2 strong Elixir 1,200,122 lines 1,635 2026-11-07 adequate
parseablehq/parseable 4 adequate · 1 strong Rust 95,920 lines 2,570 2026-11-03 adequate
ssoready/ssoready 4 adequate · 1 strong TypeScript 78,880 lines 1,530 2026-11-08 adequate
allegro/ralph 2 adequate · 3 strong Python 106,444 lines 2,532 2026-11-03 strong
pixelfed/pixelfed 2 adequate · 3 strong PHP 363,724 lines 7,116 2026-10-25 strong
kunzisoft/keepassdx 3 adequate · 1 strong Kotlin 110,294 lines 7,394 2026-10-25 adequate
iflytek/astron-agent 3 adequate · 2 strong Java 627,055 lines 8,916 2026-10-23 adequate
dimillian/icecubesapp 2 adequate · 2 strong Swift 48,777 lines 7,073 2026-10-25 adequate
inkeep/agents 2 adequate · 3 strong TypeScript 944,577 lines 1,489 2026-11-08 strong
idurar/idurar-erp-crm 2 adequate · 3 strong JavaScript 25,926 lines 8,909 2026-10-23 strong
builderio/builder 1 adequate · 3 strong TypeScript 11,872 lines 8,870 2026-10-23 strong
frappe/builder 2 adequate · 3 strong Python 89,840 lines 2,464 2026-11-03 strong
threemammals/ocelot 2 adequate · 3 strong C# 82,725 lines 8,717 2026-10-23 strong
exceptionless/exceptionless 1 adequate · 4 strong C# 301,673 lines 2,456 2026-11-03 strong
openshift/origin 5 adequate Go 570,839 lines 8,694 2026-10-23 adequate
diggerhq/digger 4 adequate · 1 strong Go 132,914 lines 5,060 2026-10-28 adequate
prometheus/alertmanager 1 adequate · 4 strong Go 119,424 lines 8,669 2026-10-23 strong
madler/zlib 3 adequate · 1 strong C 60,730 lines 7,108 2026-10-25 adequate
sylius/sylius 2 adequate · 3 strong PHP 622,568 lines 8,562 2026-10-23 strong
pockethost/pockethost 4 adequate · 1 strong TypeScript 89,670 lines 1,443 2026-11-08 adequate
nager/nager.date 1 adequate · 3 strong C# 48,408 lines 1,439 2026-11-08 strong
infrahq/infra 2 adequate · 3 strong Go 88,293 lines 1,471 2026-11-07 adequate
orange-cyberdefense/goad 2 adequate · 1 strong PowerShell 60,380 lines 8,529 2026-10-23 adequate
cloudboost/cloudboost 2 adequate · 3 strong JavaScript 265,457 lines 1,460 2026-11-08 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.