The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
someengineering/fixinventory 3 adequate · 2 strong Python 227,993 lines 2,088 2026-11-03 adequate
final-form/react-final-form 3 strong JavaScript 25,645 lines 7,434 2026-10-23 adequate
livebook-dev/livebook 2 adequate · 3 strong Elixir 124,905 lines 5,872 2026-10-25 strong
feast-dev/feast 3 adequate · 2 strong Python 471,647 lines 7,345 2026-10-23 adequate
matrixorigin/matrixone 3 adequate · 2 strong Go 2,468,474 lines 2,062 2026-11-03 adequate
zammad/zammad 3 adequate · 2 strong Ruby 1,134,488 lines 5,972 2026-10-25 adequate
eclipse-openvsx/openvsx 3 adequate · 2 strong Java 234,517 lines 2,067 2026-11-03 adequate
projectsend/projectsend 3 adequate · 2 strong PHP 227,159 lines 2,045 2026-11-03 adequate
go-rod/rod 4 adequate · 1 strong Go 59,487 lines 7,138 2026-10-23 adequate
parabolinc/parabol 4 adequate · 1 strong TypeScript 380,042 lines 2,017 2026-11-03 adequate
datajuicer/data-juicer 3 adequate · 1 strong Python 253,833 lines 7,181 2026-10-23 adequate
onionshare/onionshare 1 adequate · 3 strong Python 56,858 lines 7,184 2026-10-23 strong
openyurtio/openyurt 3 adequate · 2 strong Go 182,888 lines 2,010 2026-11-03 adequate
moonrepo/moon 2 adequate · 2 strong Rust 196,487 lines 4,169 2026-10-28 adequate
nextcloud/android 2 adequate · 2 strong Kotlin 253,487 lines 5,606 2026-10-25 adequate
fastcrw/crw 3 adequate · 1 strong Rust 262,618 lines 1,214 2026-11-08 adequate
aquasecurity/tfsec 1 adequate · 3 strong Go 34,052 lines 7,059 2026-10-23 adequate
beikeshop/beikeshop 3 adequate · 2 strong PHP 163,016 lines 1,986 2026-11-03 adequate
odoo/docker 3 adequate · 1 strong Dockerfile 1,618 lines 1,217 2026-11-07 adequate
rstudio/shiny 1 adequate · 3 strong R 151,600 lines 5,695 2026-10-25 strong
firebase/firebase-ios-sdk 1 adequate · 3 strong C++ 816,312 lines 6,980 2026-10-23 strong
snowplow/snowplow 3 adequate Scala 8,381 lines 7,045 2026-10-23 adequate
getnao/nao 3 adequate · 2 strong TypeScript 1,409,840 lines 1,980 2026-11-03 adequate
laravel/jetstream 3 strong PHP 19,907 lines 4,059 2026-10-28 adequate
codeberg.org/forgejo/forgejo 3 adequate · 2 strong Go 846,421 lines 5,540 2026-10-25 adequate
openremote/core 3 adequate · 2 strong Java 374,038 lines 1,970 2026-11-03 adequate
dromara/jpom 5 adequate Java 182,826 lines 1,951 2026-11-03 adequate
sync-in/server 3 adequate · 2 strong TypeScript 144,642 lines 1,951 2026-11-03 adequate
dolibarr/dolibarr 2 adequate · 3 strong PHP 1,516,686 lines 7,761 2026-10-22 strong
scality/cloudserver 2 adequate · 3 strong JavaScript 206,787 lines 1,954 2026-11-03 strong

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.