evaluate-repository

A repository health scorecard evaluates codebases across six critical dimensions: secrets, dependency security, input validation, authentication, error handling, and supply chain configuration. It uses git metadata and language-specific pattern scans to generate a tabular scorecard with prioritized remediation actions.

A repository health scorecard includes overall and per-dimension scores across secrets, dependency security, input validation, authentication, error handling, and supply chain configuration. It also generates a prioritized remediation plan categorized by P0, P1, and P2 severity levels.

Yes, you can assess dependency security and input validation in a read-only mode. The evaluation relies on git metadata, language-specific pattern scans, and optional CI/CD or package manager tools to analyze the repository without making any modifications.

Generating a prioritized remediation plan involves scoring six repository health dimensions and categorizing identified vulnerabilities into P0, P1, and P2 priority levels. This provides an actionable tabular scorecard for addressing security and code quality issues.

Yes, the repository health scorecard is ideal for onboarding open-source projects. It performs a comprehensive hygiene check using git metadata and language-specific pattern scans to evaluate security and code quality without modifying the repository.