The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
minio/minio 4 adequate · 2 strong Go 394,523 lines 61,351 2026-10-25 adequate
unslothai/unsloth 4 adequate · 2 strong Python 1,908,319 lines 78,469 2026-10-23 adequate
headroomlabs-ai/headroom 4 adequate · 2 strong Python 789,935 lines 77,628 2026-10-23 adequate
phpoffice/phpspreadsheet 1 adequate · 4 strong PHP 338,958 lines 14,003 2026-11-07 adequate
ghostty-org/ghostty 1 adequate · 4 strong Zig 479,227 lines 61,727 2026-10-25 strong
openwall/john 3 adequate · 2 strong C 748,306 lines 13,879 2026-11-07 adequate
livecontainer/livecontainer 5 adequate Swift 40,660 lines 13,872 2026-11-07 adequate
makeplane/plane 5 adequate · 1 strong TypeScript 551,674 lines 62,026 2026-10-25 adequate
automaapp/automa 2 adequate · 2 strong Vue 76,330 lines 21,710 2026-11-03 adequate
heyputer/puter 3 adequate · 3 strong TypeScript 762,175 lines 43,960 2026-10-28 adequate
sharkdp/bat 4 adequate Rust 75,936 lines 60,575 2026-10-25 adequate
meilisearch/meilisearch 3 adequate · 3 strong Rust 285,291 lines 59,414 2026-10-25 adequate
ultralytics/ultralytics 4 adequate · 2 strong Python 200,962 lines 62,003 2026-10-25 adequate
pocketbase/pocketbase 3 adequate · 2 strong Go 193,665 lines 61,180 2026-10-25 adequate
starship/starship 1 adequate · 4 strong Rust 230,693 lines 60,082 2026-10-25 strong
php-cs-fixer/php-cs-fixer 2 adequate · 4 strong PHP 321,768 lines 13,573 2026-11-07 strong
penpot/penpot 3 adequate · 3 strong Clojure 728,318 lines 60,442 2026-10-25 adequate
rails/rails 6 strong Ruby 694,220 lines 58,787 2026-10-25 strong
wekan/wekan 3 adequate · 2 strong JavaScript 1,278,093 lines 21,150 2026-11-03 adequate
pi-hole/pi-hole 3 adequate · 2 strong Shell 10,631 lines 61,119 2026-10-25 adequate
rclone/rclone 5 adequate · 1 strong Go 443,935 lines 60,003 2026-10-25 adequate
toeverything/affine 3 adequate · 3 strong TypeScript 1,158,373 lines 73,777 2026-10-23 adequate
swe-agent/swe-agent 1 significant · 1 adequate · 3 strong Python 26,205 lines 20,716 2026-11-03 significant findings
textualize/rich 2 adequate · 3 strong Python 68,235 lines 57,445 2026-10-25 adequate
fastlane/fastlane 2 adequate · 3 strong Ruby 246,202 lines 42,319 2026-10-28 strong
jellyfin/jellyfin 2 adequate · 4 strong C# 410,923 lines 57,542 2026-10-25 strong
netdata/netdata 3 adequate · 3 strong Go 2,132,100 lines 81,091 2026-10-22 adequate
eosphoros-ai/db-gpt 3 adequate · 3 strong Python 613,540 lines 20,250 2026-11-03 adequate
spatie/laravel-permission 5 strong PHP 20,491 lines 12,982 2026-11-07 strong
go-gitea/gitea 2 adequate · 4 strong Go 666,058 lines 58,199 2026-10-25 strong

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.