99
/ 100
Excellent work. The main thing left to polish is setup instructions.
A minimal-friction secure experience that lets agents do their work. (beta)
Outstanding. A score of 95/100 puts this repo in a very small tier of truly well-engineered projects.
Top fixes
Highest-impact changes first, ranked by point weight
Working through the fixes? Let every push regrade itself.
The free GitHub App rescans this repo on every push and posts the grade as a commit check, so the score climbs without coming back to rescan by hand.
Scorecard
Every check, grouped by category and sorted worst-first
Documentation
85
README documents how to install the project.
README is present.
Licensed under Apache-2.0.
Contributing guide is detailed and thorough.
Engineering
100
Test files detected (.claude/hooks/allow-grants.test.mjs).
CI is configured (.github/workflows/ci-aggregate-sensor.yaml).
Linter or formatter configured (.prettierrc.json).
Lockfile present (pnpm-lock.yaml). Installs are reproducible.
Issue or PR templates present.
Project health
100
Dependency manifest found (package.json).
Repository has a description.
Actively maintained (pushed within the last month).
.gitignore present.
Repository health signals
Activity, community, and responsiveness at scan time
Activity
- 12720 / 56061Commits (30d / 90d)
- 13Forks
- 108Releaseslatest 3mo ago
Community
- 75% - GoodCommunity health
- 1 bus factorlowauthor own >50% of commits
- 68Watchers
Responsiveness
- 14d 18hMedian issue response
- <1hMedian PR merge time
- 176Open issues
Repository files78 root entries
- .claudeGood: Licensed under Apache-2.0.Good: Test files detected (.claude/hooks/allow-grants.test.mjs).
- .githubGood: CI is configured (.github/workflows/ci-aggregate-sensor.yaml).Good: Dependabot covers 2 ecosystems (pip, uv). Dependencies stay current.Good: Issue or PR templates present.
- .hooks
- binGood: Environment pinned via bin/lib/kata/netd/Dockerfile.
- changelog.d
- completions
- config
- docs
- evals
- exploitbench-glovebox
- glovebox-driver
- glovebox-egress-gateway
- glovebox-github-app
- glovebox-hosts
- glovebox-monitor
- harbor-glovebox
- hooks
- inspect-glovebox
- man
- metrics
- packaging
- patches
- perflib
- sandbox-policy
- scripts
- tests
- tools
- types
- user-config
- vm-kit
- .bestpractices.json
- .c8rc.json
- .dockerignore
- .gitattributes
- .gitignoreGood: .gitignore present.
- .gitleaks.toml
- .gitleaksignore
- .grype.yaml
- .hadolint.yaml
- .markdownlint-cli2.jsonc
- .nvmrc
- .pre-commit-config.yaml
- .prettierignore
- .prettierrc.jsonGood: Linter or formatter configured (.prettierrc.json).
- .python-version
- .shellcheckrc
- .template-version
- AGENTS.md
- CHANGELOG.md
- check-globs.mjs
- CLAUDE.md
- conftest.py
- CONTRIBUTING.mdGood: Contributing guide is detailed and thorough.Good: Contributing guide includes setup/install instructions.Good: Contributing guide describes code style expectations.Good: Contributing guide explains how to run tests.Good: Contributing guide describes the PR/review workflow.Good: Contributing guide includes code examples.
- eslint.config.js
- flake.lock
- flake.nix
- GOVERNANCE.md
- install.sh
- knip.json
- LICENSE
- METRICS.md
- osv-scanner.toml
- package.jsonGood: Dependency manifest found (package.json).
- pnpm-lock.yamlGood: Lockfile present (pnpm-lock.yaml). Installs are reproducible.
- pnpm-workspace.yaml
- pyproject.toml
- pyrightconfig-tests-1.json
- pyrightconfig-tests-2.json
- pyrightconfig-tests.json
- README.mdGood: README is present.Good: README is well structured with multiple sections.Good: README includes screenshots or visuals. Great for first impressions.Good: README has code examples.Good: README links to a live demo or deployed app.Good: README includes status badges.Good: README documents how to install the project.Issue: No run or usage instructions found (−45 pts).Fix: Add a section showing how to start or use the project.
- ROADMAP.md
- SECURITY.mdGood: Security policy present.
- setup.bash
- stryker.conf.json
- stryker.scripts.conf.json
- tsconfig.json
- UNDERSTANDING.md
- uv.lock
Add this badge to your README
It updates automatically each time the repo is re-graded.
[](https://www.repo-grade.com/report/alexander-turner/claude-guard)