The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
freescout-help-desk/freescout 3 adequate · 1 strong PHP 265,962 lines 4,582 2026-10-25 adequate
influxdata/chronograf 2 adequate · 3 strong TypeScript 254,649 lines 1,568 2026-11-03 strong
tirrenotechnologies/tirreno 3 strong PHP 151,213 lines 1,562 2026-11-03 adequate
jaegertracing/jaeger-ui 4 strong TypeScript 151,418 lines 1,544 2026-11-03 strong
gitlab.com/remmina/remmina 4 adequate · 1 strong — 89,230 lines 909 2026-11-08 adequate
clientio/joint 2 adequate · 2 strong JavaScript 283,136 lines 5,394 2026-10-23 adequate
slothflowlabs/duckle 3 adequate · 2 strong Rust 240,358 lines 1,548 2026-11-03 adequate
codeberg.org/dnkl/fuzzel 3 adequate · 1 strong C 28,463 lines 925 2026-11-07 adequate
pgmq/pgmq 3 strong PLpgSQL 37,724 lines 5,350 2026-10-23 adequate
getprobo/probo 4 adequate · 1 strong Go 1,310,001 lines 1,494 2026-11-03 adequate
versity/versitygw 3 adequate · 2 strong Go 294,698 lines 3,076 2026-10-28 adequate
growilabs/growi 2 adequate · 3 strong TypeScript 657,399 lines 1,476 2026-11-03 strong
horilla/horilla-hr 4 adequate · 1 strong HTML 849,039 lines 1,486 2026-11-03 adequate
bulwarkmail/webmail 2 adequate · 3 strong TypeScript 787,125 lines 1,428 2026-11-03 adequate
edgenesis/shifu 2 adequate · 3 strong Go 41,636 lines 1,436 2026-11-03 strong
zenml-io/zenml 1 adequate · 4 strong Python 597,046 lines 5,624 2026-10-22 strong
enatega/food-delivery-multivendor 3 adequate · 1 strong TypeScript 421,827 lines 1,414 2026-11-03 adequate
amphi-ai/amphi-etl 3 adequate · 2 strong TypeScript 54,114 lines 1,410 2026-11-03 adequate
pomerium/pomerium 2 adequate · 3 strong Go 329,649 lines 5,064 2026-10-23 strong
clidey/whodb 2 adequate · 3 strong Go 464,188 lines 5,041 2026-10-23 strong
s3tools/s3cmd 2 adequate · 1 strong Python 10,583 lines 4,919 2026-10-23 adequate
cloudera/hue 1 adequate · 3 strong JavaScript 1,530,482 lines 1,410 2026-11-03 strong
casosorg/casos 3 adequate · 1 strong Go 97,031 lines 1,396 2026-11-03 adequate
iotsharp/iotsharp 3 adequate · 2 strong C# 470,263 lines 1,384 2026-11-03 adequate
surveyjs/survey-library 1 adequate · 3 strong TypeScript 534,480 lines 4,913 2026-10-23 strong
flipt-io/flipt 3 adequate · 2 strong Go 142,451 lines 4,926 2026-10-23 adequate
gitlab.com/corectrl/corectrl 3 adequate · 1 strong — 69,779 lines 879 2026-11-07 adequate
formkit/formkit 1 adequate · 3 strong TypeScript 102,743 lines 4,779 2026-10-23 strong
liftbridge-io/liftbridge 3 adequate · 2 strong Go 77,374 lines 2,805 2026-10-28 adequate
deuxfleurs-org/garage 2 adequate · 2 strong Rust 98,226 lines 4,756 2026-10-23 adequate

What a band means. A band sums up one reading of one commit: strong, adequate or significant findings. Here it counts the project's code, process, product, security and operations. A report reads more than that, so its band can differ from its row.

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.