The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
pump-io/pump.io 2 adequate · 3 strong JavaScript 118,278 lines 2,240 2026-11-03 adequate
warrant-dev/warrant 3 adequate · 1 strong Go 44,969 lines 1,341 2026-11-08 adequate
elasticsearch-dump/elasticsearch-dump 3 adequate · 2 strong JavaScript 9,995 lines 7,942 2026-10-23 adequate
coroot/coroot 4 adequate · 1 strong Go 98,435 lines 7,982 2026-10-23 adequate
bentoml/bentoml 2 adequate · 3 strong Python 113,058 lines 8,914 2026-10-22 strong
btcpayserver/btcpayserver 3 adequate · 2 strong C# 203,741 lines 7,823 2026-10-23 adequate
sequinstream/sequin 1 adequate · 3 strong Elixir 153,757 lines 2,224 2026-11-03 strong
manyfold3d/manyfold 4 adequate · 1 strong Ruby 90,677 lines 2,224 2026-11-03 adequate
hanami/hanami 1 adequate · 3 strong Ruby 40,626 lines 6,418 2026-10-25 strong
angular/angularfire 2 adequate · 2 strong TypeScript 33,761 lines 7,796 2026-10-23 adequate
meteroid-oss/meteroid 4 adequate · 1 strong Rust 351,598 lines 1,343 2026-11-07 adequate
osmantic/ods 3 adequate · 2 strong Python 844,920 lines 7,665 2026-10-23 adequate
sysadminsmedia/homebox 3 adequate · 2 strong Go 249,620 lines 7,624 2026-10-23 adequate
googlecloudplatform/berglas 2 adequate · 2 strong Go 8,880 lines 1,303 2026-11-08 adequate
pgbackrest/pgbackrest 1 adequate · 3 strong C 215,770 lines 4,462 2026-10-28 strong
xalgorix/xalgorix 3 adequate · 2 strong Go 382,352 lines 1,291 2026-11-08 adequate
vendurehq/vendure 2 adequate · 3 strong TypeScript 612,894 lines 8,530 2026-10-22 strong
kubeshop/monokle 4 adequate · 1 strong TypeScript 129,420 lines 2,140 2026-11-03 adequate
ever-co/ever-traduora 2 adequate · 3 strong JavaScript 69,623 lines 2,139 2026-11-03 strong
horizontalsystems/unstoppable-wallet-android 3 adequate · 1 strong Kotlin 198,922 lines 1,266 2026-11-08 adequate
streamdal/plumber 1 adequate · 4 strong Go 85,392 lines 2,154 2026-11-03 adequate
freeipa/freeipa 2 adequate · 3 strong Python 678,513 lines 1,298 2026-11-07 strong
drasi-project/drasi-platform 2 adequate · 3 strong C# 124,690 lines 1,256 2026-11-08 strong
fluxcd/flux2 2 adequate · 3 strong Go 67,121 lines 8,458 2026-10-22 strong
gopeak/dectask 1 adequate · 2 strong JavaScript 491,656 lines 1,265 2026-11-08 adequate
someengineering/fixinventory 3 adequate · 2 strong Python 227,993 lines 2,088 2026-11-03 adequate
final-form/react-final-form 3 strong JavaScript 25,645 lines 7,434 2026-10-23 adequate
livebook-dev/livebook 2 adequate · 3 strong Elixir 124,905 lines 5,872 2026-10-25 strong
feast-dev/feast 3 adequate · 2 strong Python 471,647 lines 7,345 2026-10-23 adequate
matrixorigin/matrixone 3 adequate · 2 strong Go 2,468,474 lines 2,062 2026-11-03 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.