hashgraph-online/hol-guard
Grade a repo

99

/ 100

GradeA

Exemplary work. Strong across engineering, project hygiene, and documentation.

Top 2% of 5,156 graded repos

Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.

Documentation97
Engineering100
Health100
Python554Apache-2.022d ago

Outstanding. A score of 99/100 puts this repo in a very small tier of truly well-engineered projects.

Top fixes

Highest-impact changes first, ranked by point weight

1 to address
  1. 1
    Install and run instructions9pt

    Add a .env.example listing all required environment variables so contributors know what to set up.

Working through the fixes? Let every push regrade itself.

The free GitHub App rescans this repo on every push and posts the grade as a commit check, so the score climbs without coming back to rescan by hand.

Install the GitHub App

Scorecard

Every check, grouped by category and sorted worst-first

Documentation

97

Install and run instructions9pt90

README documents how to install the project.

README12pt100

README is present.

License6pt100

Licensed under Apache-2.0.

Contributing guide5pt100

Contributing guide is detailed and thorough.

Engineering

100

Tests18pt100

Test files detected (ci/native_runtime/test_command_model_differential.py).

CI/CD14pt100

CI is configured (.github/workflows/ci.yml).

Linting and formatting5pt100

Linter or formatter configured ([tool.ruff] / [tool.black] in pyproject.toml).

Reproducibility6pt100

Lockfile present (requirements.txt). Installs are reproducible.

Issue and PR templates6pt100

Issue or PR templates present.

Project health

100

Dependency manifest6pt100

Dependency manifest found (pyproject.toml).

Repository metadata5pt100

Repository has a description.

Activity5pt100

Actively maintained (pushed within the last month).

Housekeeping3pt100

.gitignore present.

Repository health signals

Activity, community, and responsiveness at scan time

Activity

  • -
    Commits (30d / 90d)
  • 29
    Forks
  • 1000
    Releaseslatest 3mo ago

Community

  • 75% - Good
    Community health
  • 1 bus factorlow
    author own >50% of commits
  • 554
    Watchers

Responsiveness

  • 21h
    Median issue response
  • <1h
    Median PR merge time
  • 38
    Open issues
Repository files46 root entries
  • .clusterfuzzlite
    Good: Environment pinned via .clusterfuzzlite/Dockerfile.
  • .factory
  • .github
    Good: CI is configured (.github/workflows/ci.yml).
    Good: Dependabot covers 3 ecosystems (pip, github-actions, docker). Dependencies stay current.
    Good: Issue or PR templates present.
  • action
  • ci
    Good: Test files detected (ci/native_runtime/test_command_model_differential.py).
  • contracts
  • contributions
  • dashboard
  • devcontainer-features
  • distributions
  • docs
  • fuzzers
  • guarded-repository
  • integrations
  • release-metadata
  • rust
  • schemas
  • scripts
  • spec
  • src
  • tests
  • .dockerignore
  • .gitattributes
  • .gitignore
    Good: .gitignore present.
  • .gitleaksignore
  • .pre-commit-hooks.yaml
  • CHANGELOG.md
  • CITATION.cff
  • conftest.py
  • CONTRIBUTING.md
    Good: Contributing guide is detailed and thorough.
    Good: Contributing guide includes setup/install instructions.
    Good: Contributing guide describes code style expectations.
    Good: Contributing guide explains how to run tests.
    Good: Contributing guide describes the PR/review workflow.
    Good: Contributing guide includes code examples.
  • docker-requirements.txt
  • Dockerfile
  • HOL_GUARD_ANSWERS.md
  • LICENSE
    Good: Licensed under Apache-2.0.
  • llms-install.md
  • OPEN_SOURCE.md
  • pr-body.md
  • PRODUCT.md
  • pyproject.toml
    Good: Dependency manifest found (pyproject.toml).
  • README.md
    Good: README is present.
    Good: README is well structured with multiple sections.
    Good: README includes screenshots or visuals. Great for first impressions.
    Good: README has code examples.
    Good: README links to a live demo or deployed app.
    Good: README includes status badges.
    Good: README documents how to install the project.
    Good: README documents how to run the project.
  • requirements.txt
    Good: Lockfile present (requirements.txt). Installs are reproducible.
  • security-insights.yml
  • SECURITY.md
    Good: Security policy present.
  • server.json
  • sonar-project.properties
  • uv.lock
RepoGrade badge preview

Add this badge to your README

It updates automatically each time the repo is re-graded.

[![RepoGrade](https://www.repo-grade.com/api/badge/hashgraph-online/hol-guard)](https://www.repo-grade.com/report/hashgraph-online/hol-guard)

More graded Python repos