sigstore/timestamp-authority

0

/ 100

Documentation82
Engineering88
Health100
Go136Apache-2.01d ago
Grade a repo

Polished and well engineered. Punching above its star count.

RFC3161 Timestamp Authority

Documentation

82

Contributing guide5pt5

No CONTRIBUTING.md found (−47 pts base + up to −53 pts more for content).

→ Add a CONTRIBUTING.md telling newcomers how to get involved. Include setup, code style, test, and PR instructions.

Install and run instructions9pt90

README documents how to install the project.

README12pt100

README is present.

License6pt100

Licensed under Apache-2.0.

Engineering

88

Issue and PR templates6pt0

No issue or PR templates found (−100 pts).

→ Add .github/ISSUE_TEMPLATE/ with bug_report.md and feature_request.md to guide contributors. It dramatically improves issue quality.

Tests18pt100

Test files detected (cmd/timestamp-cli/app/pflags_test.go).

CI/CD14pt100

CI is configured (.github/workflows/build-snapshot.yaml).

Linting and formatting5pt100

Formatting enforced (.golangci.yml).

Reproducibility6pt100

Lockfile present (go.sum). Installs are reproducible.

Project health

100

Dependency manifest6pt100

Dependency manifest found (go.mod).

Repository metadata5pt100

Repository has a description.

Activity5pt100

Actively maintained (pushed within the last month).

Housekeeping3pt100

.gitignore present.

Repository health signals

Activity, community, and responsiveness at scan time

Activity

  • —
    Commits (30d / 90d)
  • 60
    Forks
  • 31
    Releaseslatest 3y ago

Community

  • —
    Community health
  • —
    authors own >50% of commits
  • 136
    Watchers

Responsiveness

  • 11d 13h
    Median issue response
  • 3d 24h
    Median PR merge time
  • 9
    Open issues
Repository files25 root entries
  • .github
    Good: CI is configured (.github/workflows/build-snapshot.yaml).
    Good: Dependabot covers 4 ecosystems (gomod, gomod, github-actions, docker). Dependencies stay current.
  • cmd
    Good: Test files detected (cmd/timestamp-cli/app/pflags_test.go).
  • docs
  • hack
  • pkg
  • release
  • test
  • .gitignore
    Good: .gitignore present.
  • .golangci.yml
    Good: Formatting enforced (.golangci.yml).
  • .goreleaser.yml
  • .ko.yaml
  • CHANGELOG.md
  • CODE_OF_CONDUCT.md
    Good: Code of conduct present.
  • codecov.yml
  • CODEOWNERS
  • CONTRIBUTORS.md
  • COPYRIGHT.txt
  • docker-compose.yml
  • Dockerfile
    Good: Environment pinned via Dockerfile.
  • go.mod
    Good: Dependency manifest found (go.mod).
  • go.sum
    Good: Lockfile present (go.sum). Installs are reproducible.
  • LICENSE
    Good: Licensed under Apache-2.0.
  • Makefile
  • openapi.yaml
  • README.md
    Good: README is present.
    Good: README is well structured with multiple sections.
    Good: README includes screenshots or visuals. Great for first impressions.
    Good: README has code examples.
    Good: README links to a live demo or deployed app.
    Good: README includes status badges.
    Good: README documents how to install the project.
    Good: README documents how to run the project.