projectdiscovery/nuclei
Grade a repo

98

/ 100

GradeA

A top-tier open source project. Docs, tests, and CI are all in excellent shape.

Top 3% of 5,156 graded repos

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.

Documentation95
Engineering100
Health100
Go29,410MIT1mo ago

Outstanding. A score of 98/100 puts this repo in a very small tier of truly well-engineered projects.

Top fixes

Highest-impact changes first, ranked by point weight

4 to address
  1. 1
    Install and run instructions9pt

    Add a .env.example listing all required environment variables so contributors know what to set up.

  2. 2
    Contributing guide5pt

    Add setup instructions, code style notes, and how to run tests.

  3. 3
    Contributing guide5pt

    Show contributors how to run the test suite (e.g. npm test, pytest, cargo test).

  4. 4
    Contributing guide5pt

    A CODE_OF_CONDUCT.md signals that your project is welcoming. GitHub has a template you can add in one click.

Working through the fixes? Let every push regrade itself.

The free GitHub App rescans this repo on every push and posts the grade as a commit check, so the score climbs without coming back to rescan by hand.

Install the GitHub App

Scorecard

Every check, grouped by category and sorted worst-first

Documentation

95

Contributing guide5pt86

Contributing guide is too short for full depth credit (−6 pts). 400+ words earns the full +12 pts.

→ Add setup instructions, code style notes, and how to run tests.

Install and run instructions9pt90

README documents how to install the project.

README12pt100

README is present.

License6pt100

Licensed under MIT.

Engineering

100

Tests18pt100

Test files detected (cmd/nuclei/main_benchmark_test.go).

CI/CD14pt100

CI is configured (.github/workflows/tests.yaml).

Linting and formatting5pt100

Formatting enforced (gofmt (built into Go toolchain)).

Reproducibility6pt100

Lockfile present (go.sum). Installs are reproducible.

Issue and PR templates6pt100

Issue or PR templates present.

Project health

100

Dependency manifest6pt100

Dependency manifest found (go.mod).

Repository metadata5pt100

Repository has a description.

Activity5pt100

Actively maintained (pushed within the last month).

Housekeeping3pt100

.gitignore present.

Repository health signals

Activity, community, and responsiveness at scan time

Activity

  • 34 / 113
    Commits (30d / 90d)
  • 3,521
    Forks
  • 145
    Releaseslatest 6y ago

Community

  • 100% - Good
    Community health
  • 3 bus factor
    authors own >50% of commits
  • 29,410
    Watchers

Responsiveness

  • 4d 10h
    Median issue response
  • <1h
    Median PR merge time
  • 98
    Open issues
Repository files36 root entries
  • .github
    Good: CI is configured (.github/workflows/tests.yaml).
    Good: Dependabot covers 3 ecosystems (gomod, github-actions, docker). Dependencies stay current.
    Good: Issue or PR templates present.
  • .run
  • cmd
    Good: Test files detected (cmd/nuclei/main_benchmark_test.go).
  • examples
  • helm
  • internal
  • lib
  • pkg
  • static
  • _typos.toml
  • .gitignore
    Good: .gitignore present.
  • .goreleaser.yml
  • CLAUDE.md
  • CONTRIBUTING.md
    Issue: Contributing guide is too short for full depth credit (−6 pts). 400+ words earns the full +12 pts.Fix: Add setup instructions, code style notes, and how to run tests.
    Good: Contributing guide includes setup/install instructions.
    Good: Contributing guide describes code style expectations.
    Issue: Contributing guide lacks a testing section (−8 pts).Fix: Show contributors how to run the test suite (e.g. npm test, pytest, cargo test).
    Good: Contributing guide describes the PR/review workflow.
    Good: Contributing guide includes code examples.
  • DEBUG.md
  • DESIGN.md
  • Dockerfile
    Good: Environment pinned via Dockerfile.
  • Dockerfile.goreleaser
  • FUZZING.md
  • go.mod
    Good: Dependency manifest found (go.mod).
  • go.sum
    Good: Lockfile present (go.sum). Installs are reproducible.
  • go.tool.mod
  • go.tool.sum
  • LICENSE.md
    Good: Licensed under MIT.
  • Makefile
  • nuclei-jsonschema.json
  • README_CN.md
    Good: README is present.
    Good: README is well structured with multiple sections.
    Good: README includes screenshots or visuals. Great for first impressions.
    Good: README has code examples.
    Good: README links to a live demo or deployed app.
    Good: README includes status badges.
    Good: README documents how to install the project.
    Good: README documents how to run the project.
  • README_ES.md
  • README_ID.md
  • README_JP.md
  • README_KR.md
  • README_PT-BR.md
  • README_TR.md
  • README.md
  • SYNTAX-REFERENCE.md
  • THANKS.md
RepoGrade badge preview

Add this badge to your README

It updates automatically each time the repo is re-graded.

[![RepoGrade](https://www.repo-grade.com/api/badge/projectdiscovery/nuclei)](https://www.repo-grade.com/report/projectdiscovery/nuclei)

More graded Go repos