The library

Every public repository surveyed, browsable and searchable. Including the unflattering ones — a tool that only published good results would be a badge vending machine, not a diligence instrument.

All bands Strong Adequate Significant findings 1,656 surveyed
Sort Relevance Newest Stars Lines of code Files History Findings Worst band
RepositoryLanguageSizeStarsReadBand
kubeflow/kubeflow 1 adequate — 343 lines 15,948 2026-11-03 adequate
termix-ssh/termix 5 adequate · 1 strong TypeScript 1,920,750 lines 15,806 2026-11-03 adequate
payloadcms/payload 2 adequate · 4 strong TypeScript 992,903 lines 45,678 2026-10-25 strong
unstructured-io/unstructured 2 adequate · 3 strong HTML 297,609 lines 15,676 2026-11-03 strong
paradevai/paradev 4 adequate · 2 strong TypeScript 2,784,458 lines 15,869 2026-11-03 adequate
streamlit/streamlit 3 adequate · 2 strong Python 712,175 lines 45,838 2026-10-25 adequate
files-community/files 3 adequate · 2 strong C# 151,968 lines 45,663 2026-10-25 adequate
sharkdp/fd 1 adequate · 2 strong Rust 11,649 lines 44,614 2026-10-25 adequate
ansible/awx 3 adequate · 2 strong Python 223,387 lines 15,618 2026-11-03 adequate
owasp-amass/amass 5 adequate Go 39,830 lines 15,457 2026-11-03 adequate
mitmproxy/mitmproxy 2 adequate · 4 strong Python 127,014 lines 45,188 2026-10-25 strong
mail-in-a-box/mailinabox 3 adequate · 3 strong Python 21,563 lines 15,454 2026-11-03 adequate
charmbracelet/bubbletea 2 adequate · 3 strong Go 17,212 lines 45,155 2026-10-25 adequate
crowdsecurity/crowdsec 3 adequate · 3 strong Go 238,531 lines 15,441 2026-11-03 adequate
curl/curl 1 adequate · 4 strong C 469,729 lines 42,929 2026-10-25 strong
juanfont/headscale 1 adequate · 4 strong Go 191,055 lines 44,187 2026-10-25 strong
nodebb/nodebb 1 adequate · 5 strong JavaScript 380,696 lines 15,246 2026-11-03 strong
caprover/caprover 1 significant · 2 adequate · 3 strong TypeScript 30,923 lines 15,197 2026-11-03 significant findings
sxyazi/yazi 2 adequate · 1 strong Rust 91,229 lines 42,508 2026-10-25 adequate
botpress/botpress 2 adequate · 4 strong TypeScript 320,899 lines 14,975 2026-11-03 strong
alamofire/alamofire 1 adequate · 4 strong Swift 360,595 lines 42,420 2026-10-25 strong
psf/black 1 adequate · 4 strong Python 96,921 lines 41,857 2026-10-25 strong
exelban/stats 3 adequate · 1 strong Swift 49,507 lines 42,213 2026-10-25 adequate
labring/fastgpt 3 adequate · 3 strong TypeScript 997,571 lines 29,931 2026-10-28 adequate
vim/vim 3 adequate · 1 strong Vim Script 1,436,725 lines 41,005 2026-10-25 adequate
semaphoreui/semaphore 3 adequate · 3 strong Go 176,491 lines 14,365 2026-11-03 adequate
goharbor/harbor 2 adequate · 4 strong Go 430,617 lines 29,629 2026-10-28 strong
browseros-ai/browseros 3 adequate · 3 strong TypeScript 538,005 lines 14,235 2026-11-03 adequate
novuhq/novu 3 adequate · 3 strong TypeScript 1,128,292 lines 40,086 2026-10-25 adequate
duckdb/duckdb 1 adequate · 2 strong C++ 1,070,858 lines 41,709 2026-10-25 adequate

How listing works. Every public repository surveyed is listed — assessing public work is commentary on public work, and a library that hid the small ones would be quietly editorialising about which code counts. Private repositories are never listed. Anyone who proves control of a repo can attach a response to a finding, request a re-run, or delist it. Delisting is immediate and no-questions. An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev. There is no org-level score. Repositories are listed one by one, and sorting by band orders them by their own readings. Takedown: one email, 48 hours.