Polished and well engineered. Punching above its star count.
Built-in Panther detection rules and policies
Documentation
94
Contributing guide is too short for full depth credit (−6 pts). 400+ words earns the full +12 pts.
→ Add setup instructions, code style notes, and how to run tests.
README documents how to install the project.
README is present.
Licensed under Apache-2.0.
Engineering
93
Test files detected (.scripts/test_generate_versions_file.py).
CI is configured (.github/workflows/check-deprecated.yml).
Linter or formatter configured (.pylintrc).
Lockfile present (Pipfile.lock). Installs are reproducible.
Issue or PR templates present.
Project health
86
Dependency manifest found (Pipfile).
Repository has a description.
Actively maintained (pushed within the last month).
.gitignore present.
Repository health signals
Activity, community, and responsiveness at scan time
Activity
- —Commits (30d / 90d)
- 202Forks
- 194Releaseslatest 5y ago
Community
- —Community health
- —authors own >50% of commits
- 455Watchers
Responsiveness
- 35d 19hMedian issue response
- 2hMedian PR merge time
- 11Open issues
Repository files37 root entries
- .claude
- .githubGood: CI is configured (.github/workflows/check-deprecated.yml).Good: Dependabot covers 2 ecosystems (github-actions, pip). Dependencies stay current.Good: Issue or PR templates present.
- .img
- .scriptsGood: Test files detected (.scripts/test_generate_versions_file.py).
- .vscode
- correlation_rules
- data_models
- global_helpers
- indexes
- lookup_tables
- packs
- policies
- queries
- rules
- style_guides
- templates
- test_scenarios
- .bandit
- .gitattributes
- .gitignoreGood: .gitignore present.
- .pre-commit-config.yaml
- .pylintrcGood: Linter or formatter configured (.pylintrc).
- .python-version
- .versions.yml
- AGENTS.md
- CLAUDE.md
- CODE_OF_CONDUCT.mdGood: Code of conduct present.
- CONTRIBUTING.mdIssue: Contributing guide is too short for full depth credit (−6 pts). 400+ words earns the full +12 pts.Fix: Add setup instructions, code style notes, and how to run tests.Issue: Contributing guide lacks a setup section (−12 pts).Fix: Show new contributors how to get a local dev environment running.Issue: Contributing guide lacks a code style section (−8 pts).Fix: Describe your linting/formatting rules and how to run them.Good: Contributing guide explains how to run tests.Good: Contributing guide describes the PR/review workflow.Good: Contributing guide includes code examples.
- deprecated.txt
- DockerfileGood: Environment pinned via Dockerfile.
- LICENSE.txtGood: Licensed under Apache-2.0.
- Makefile
- PipfileGood: Dependency manifest found (Pipfile).
- Pipfile.lockGood: Lockfile present (Pipfile.lock). Installs are reproducible.
- pyproject.toml
- README.mdGood: README is present.Good: README is well structured with multiple sections.Good: README includes screenshots or visuals. Great for first impressions.Good: README has code examples.Good: README links to a live demo or deployed app.Good: README includes status badges.Good: README documents how to install the project.Good: README documents how to run the project.
- SECURITY.mdGood: Security policy present.