Any public report listed here can be delisted, without questions. There is no appeal to make and no case to argue.

Delisting takes every public reading of the repository out of the library, stops its badge, and delists every later reading too. A report's own address still opens for anyone who has it, and a verification code already given out still resolves and says the report was delisted, so evidence somebody was shown is not erased.

Delist it yourself

If GitHub says you have admin or maintain permission on the repository, sign in with GitHub and enter it here. It is delisted as soon as you submit.

Repository Delist it

Or write to us

Email takedown@borehole.dev with the repository's address. A person delists it within 48 hours, usually sooner, and replies once it is done.

What we will not do

We do not publish org-level scores, rankings or leaderboards. Repositories are listed as repositories. There is no page that aggregates an organisation, and there will not be.

If you think a finding is wrong

Say so, at takedown@borehole.dev. Every finding shows its evidence precisely so it can be checked and argued with. A finding shown to be wrong is a fault in the check that made it. We correct the check and read the repository's newest reading again. The new reading of that commit replaces the old one on the report's page, and the earlier reading says that a newer one exists. A reading of an older commit is not read again.

If you control the repository, you can also answer a finding yourself. Your response is published beside it, signed, so your explanation sits next to ours, and it tells us where a check needs fixing.

An owner's response is removed only when it is unlawful, impersonates someone, publishes personal data or a credential, or is not about the finding. Disagreeing with the report is never a reason. To report a response, or to reach us about one, write to takedown@borehole.dev.

Removing what a report holds

If you control the repository, you can ask for more than delisting. Here is what each request does.

• Quoted lines. Some checks quote a line as evidence, such as a TODO. Remove them from a report's own page, signed in with GitHub. Every reading of the repository is rewritten without them, and every later one is stored without them.
• Findings about one person. A contributor may object to findings about one person, as the privacy notice says. We remove them from every reading of the repository, including later ones.
• The whole report. Delisting is how a report is taken down. We do not delete a public reading, because a verification code someone was shown has to keep saying what it was issued for. A delisted report is out of the library, has no badge, and is not indexed by search engines.