manticore-projects/aurscan

0

/ 100

Documentation85
Engineering72
Health100
Go98Other1d ago
Grade a repo

Strong early engineering with some momentum.

Automatically scan AUR packages for malware before installing (using LLM/AI)

Documentation

85

Contributing guide5pt25

Contributing guidance is in the README, not a dedicated CONTRIBUTING.md (−20 pts).

→ Moving it to a CONTRIBUTING.md makes it easier to find and keeps the README focused. A dedicated file earns +47 pts base.

Install and run instructions9pt90

README documents how to install the project.

README12pt100

README is present.

License6pt100

Licensed under Other.

Engineering

72

Issue and PR templates6pt0

No issue or PR templates found (−100 pts).

→ Add .github/ISSUE_TEMPLATE/ with bug_report.md and feature_request.md to guide contributors. It dramatically improves issue quality.

Reproducibility6pt5

No dependency lockfile found (−70 pts).

→ Commit go.sum so Go module downloads are repeatable.

CI/CD14pt85

CI is configured (.github/workflows/ci.yml).

Tests18pt100

Test files detected (cmd/aurscan/paclist_test.go).

Linting and formatting5pt100

Formatting enforced (gofmt (built into Go toolchain)).

Project health

100

Dependency manifest6pt100

Dependency manifest found (go.mod).

Repository metadata5pt100

Repository has a description.

Activity5pt100

Actively maintained (pushed within the last month).

Housekeeping3pt100

.gitignore present.

Repository health signals

Activity, community, and responsiveness at scan time

Activity

  • —
    Commits (30d / 90d)
  • 10
    Forks
  • 11
    Releaseslatest 3d ago

Community

  • —
    Community health
  • —
    authors own >50% of commits
  • 98
    Watchers

Responsiveness

  • 4h
    Median issue response
  • 9h
    Median PR merge time
  • 9
    Open issues
Repository files12 root entries
  • .github
    Good: CI is configured (.github/workflows/ci.yml).
  • cmd
    Good: Test files detected (cmd/aurscan/paclist_test.go).
  • internal
  • packaging
  • testdata
  • .gitignore
    Good: .gitignore present.
  • CHANGELOG.md
  • go.mod
    Good: Dependency manifest found (go.mod).
  • install.sh
  • LICENSE
    Good: Licensed under Other.
  • Makefile
  • README.md
    Good: README is present.
    Good: README is well structured with multiple sections.
    Good: README includes screenshots or visuals. Great for first impressions.
    Good: README has code examples.
    Good: README links to a live demo or deployed app.
    Good: README includes status badges.
    Good: README documents how to install the project.
    Good: README documents how to run the project.