sonarsource/sonar-dotnet
Grade a repo

80

/ 100

GradeB

Good shape overall. A few tweaks would push it into the top tier.

Top 32% of 5,156 graded repos

Code analyzer for C# and VB.NET projects

Documentation82
Engineering72
Health100
C#909Other1mo ago

Top fixes

Highest-impact changes first, ranked by point weight

11 to address
  1. 1
    Tests18pt

    Wire your tests to a documented command (e.g. a test script in your build config) so the suite is reproducible.

  2. 2
    CI/CD14pt

    Add a step like `run: npm test`, `run: pytest`, or `run: tox` to your workflow file.

  3. 3
    CI/CD14pt

    Add `pull_request:` to the workflow `on:` triggers.

  4. 4
    CI/CD14pt

    Add a lint step to catch style issues automatically.

Working through the fixes? Let every push regrade itself.

The free GitHub App rescans this repo on every push and posts the grade as a commit check, so the score climbs without coming back to rescan by hand.

Install the GitHub App

Scorecard

Every check, grouped by category and sorted worst-first

Documentation

82

Contributing guide5pt0

No CONTRIBUTING.md found (−47 pts base + up to −53 pts more for content).

→ Add a CONTRIBUTING.md telling newcomers how to get involved. Include setup, code style, test, and PR instructions.

Install and run instructions9pt90

README documents how to install the project.

README12pt100

README is present.

License6pt100

Licensed under Other.

Engineering

72

CI/CD14pt40

CI is configured (.github/workflows/LabelIssue.yml).

Reproducibility6pt70

Lockfile present (analyzers/src/RuleDescriptorGenerator/packages.lock.json). Installs are reproducible.

Tests18pt80

Test files detected (analyzers/tests).

Linting and formatting5pt100

.NET formatting configured (.editorconfig).

Issue and PR templates6pt100

Issue or PR templates present.

Project health

100

Dependency manifest6pt100

Dependency manifest found (pom.xml).

Repository metadata5pt100

Repository has a description.

Activity5pt100

Actively maintained (pushed within the last month).

Housekeeping3pt100

.gitignore present.

Repository health signals

Activity, community, and responsiveness at scan time

Activity

  • -
    Commits (30d / 90d)
  • 242
    Forks
  • 194
    Releaseslatest 10y ago

Community

  • 62% - Fair
    Community health
  • 6 bus factor
    authors own >50% of commits
  • 909
    Watchers

Responsiveness

  • 10d 23h
    Median issue response
  • <1h
    Median PR merge time
  • 243
    Open issues
Repository files21 root entries
  • .github
    Good: CI is configured (.github/workflows/LabelIssue.yml).
    Good: Issue or PR templates present.
  • analyzers
    Good: Test files detected (analyzers/tests).
    Good: Lockfile present (analyzers/src/RuleDescriptorGenerator/packages.lock.json). Installs are reproducible.
  • docs
  • scripts
  • sonar-csharp-core
  • sonar-csharp-plugin
  • sonar-dotnet-core
  • sonar-vbnet-core
  • sonar-vbnet-plugin
  • .editorconfig
    Good: .NET formatting configured (.editorconfig).
  • .gitattributes
  • .gitignore
    Good: .gitignore present.
  • .globalconfig
  • .mcp.json
  • azure-pipelines.yml
  • global.json
  • LICENSE.txt
    Good: Licensed under Other.
  • NOTICE.txt
  • pom.xml
    Good: Dependency manifest found (pom.xml).
  • README.md
    Good: README is present.
    Good: README is well structured with multiple sections.
    Good: README includes screenshots or visuals. Great for first impressions.
    Good: README has code examples.
    Good: README links to a live demo or deployed app.
    Good: README includes status badges.
    Good: README documents how to install the project.
    Good: README documents how to run the project.
  • SECURITY.md
    Good: Security policy present.
RepoGrade badge preview

Add this badge to your README

It updates automatically each time the repo is re-graded.

[![RepoGrade](https://www.repo-grade.com/api/badge/sonarsource/sonar-dotnet)](https://www.repo-grade.com/report/sonarsource/sonar-dotnet)

More graded C# repos