85
/ 100
A well-known project done right. Strong docs and solid engineering throughout.
Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!
Top fixes
Highest-impact changes first, ranked by point weight
- 1Tests18pt
Wire your tests to a documented command (e.g. a test script in your build config) so the suite is reproducible.
- 2CI/CD14pt
Add a step like `run: npm test`, `run: pytest`, or `run: tox` to your workflow file.
- 3CI/CD14pt
Add a lint step to catch style issues automatically.
- 4CI/CD14pt
Add `tsc --noEmit`, `mypy`, or `cargo check` to catch type errors before they merge.
Working through the fixes? Let every push regrade itself.
The free GitHub App rescans this repo on every push and posts the grade as a commit check, so the score climbs without coming back to rescan by hand.
Scorecard
Every check, grouped by category and sorted worst-first
Documentation
84
CONTRIBUTING guide is very brief (−12 pts for depth). 150+ words earns +6 pts; 400+ earns +12 pts.
→ Add setup instructions, code style notes, and how to run tests.
This repository is large enough that GitHub truncated the file tree. The scan is based on a partial file list, so some checks may under-report.
README documents how to install the project.
Licensed under MIT.
Engineering
80
CI is configured (.github/workflows/check-ai-review-approval.yml).
Test files detected (.github/github_workflow_scripts/github_workflow_scripts_tests/autobump_rn_test.py).
Linter or formatter configured (.editorconfig).
Lockfile present (Packs/Exchange2016_Compliance/Integrations/Exchange2016_Compliance/doc_files/requirements.txt). Installs are reproducible.
Issue or PR templates present.
Project health
100
Dependency manifest found (Packs/Exchange2016_Compliance/Integrations/Exchange2016_Compliance/doc_files/requirements.txt).
Repository has a description.
Actively maintained (pushed within the last month).
.gitignore present.
Repository health signals
Activity, community, and responsiveness at scan time
Activity
- 358 / 1100Commits (30d / 90d)
- 1,951Forks
- 0Releases
Community
- 75% - GoodCommunity health
- 26 bus factorauthors own >50% of commits
- 1,286Watchers
Responsiveness
- -Median issue response
- <1hMedian PR merge time
- 221Open issues
Repository files23 root entries
- .devcontainerGood: Environment pinned via .devcontainer/Dockerfile.
- .githubGood: Test files detected (.github/github_workflow_scripts/github_workflow_scripts_tests/autobump_rn_test.py).Good: CI is configured (.github/workflows/check-ai-review-approval.yml).Good: Dependabot covers 3 ecosystems (github-actions, npm, pip). Dependencies stay current.Good: Issue or PR templates present.
- .gitlab
- .guardrails
- .hooks
- .vscode
- Config
- Documentation
- Images
- PacksGood: Lockfile present (Packs/Exchange2016_Compliance/Integrations/Exchange2016_Compliance/doc_files/requirements.txt). Installs are reproducible.Good: Dependency manifest found (Packs/Exchange2016_Compliance/Integrations/Exchange2016_Compliance/doc_files/requirements.txt).
- .editorconfigGood: Linter or formatter configured (.editorconfig).
- .git-blame-ignore-revs
- .gitignoreGood: .gitignore present.
- .lgtm.yml
- .markdownlint-cli2.jsonc
- .nvmrc
- .pre-commit-config_template.yaml
- .secrets_white_list.json
- .sourcery.yaml
- AGENTS.md
- CODE_OF_CONDUCT.mdGood: Code of conduct present.
- CONTRIBUTING.mdIssue: CONTRIBUTING guide is very brief (−12 pts for depth). 150+ words earns +6 pts; 400+ earns +12 pts.Fix: Add setup instructions, code style notes, and how to run tests.Issue: Contributing guide lacks a setup section (−12 pts).Fix: Show new contributors how to get a local dev environment running.Issue: Contributing guide lacks a code style section (−8 pts).Fix: Describe your linting/formatting rules and how to run them.Issue: Contributing guide lacks a testing section (−8 pts).Fix: Show contributors how to run the test suite (e.g. npm test, pytest, cargo test).Issue: Contributing guide lacks a PR workflow section (−8 pts).Fix: Explain how to fork, branch, and open a pull request so contributors know what to expect.Issue: Contributing guide has no code examples (−5 pts).Fix: Add code blocks showing example commands for setup, running tests, and submitting a PR.
- LICENSEGood: Licensed under MIT.
Add this badge to your README
It updates automatically each time the repo is re-graded.
[](https://www.repo-grade.com/report/demisto/content)