Skip to the main content
The Repo Vitals mark: a pulse that ends in a commitREPO VITALS

applicable weight 65%

github2sourcecraft/cyclonedx-gomod

Language: Go
branch main
mirror

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

Open on SourceCraftDownload report (Markdown)snapshot 8 October 2026signal coverage 65%analysed 23 September 2026 at 21:23 UTC — part unavailable

What the 100 is made of

category weight
Documentation 20Activity 20Security 20CI/CD 15Issues 15Code health 10

The light segments — Security: will appear with a member token; Issues: the tracker is empty or not set up. The rest share their weight for now.

Six categories

earned / weight
Documentation and best practicessignal coverage 83%
25.6–30.8 / 30.8
partial
Project activity
26.4 / 30.8
scored
Securitywill appear with a member token
no data
CI/CDsignal coverage 50%
0–11.5 / 23.1
partial
Issuesthe tracker is empty or not set up
no data
Code health
0–15.4 / 15.4
collection failed
States:
scored
partial
no data
weight goes to the rest
collection failed
interval, not zero
Not measured: CI runs
closed by the platform
will become a group once access opens
Not measured: docs directory, contributing guide, TODO/FIXME density
couldn't see it
the platform's window was truncated: a deep file or a recent version may have fallen outside it

Strengths

what's already done
  • The README introduces the project
  • Commits span the whole year (124 commits)
  • Work goes on without long pauses (10 weeks)
  • A team works on the project (8 authors)
  • Commits are fresh (31 days)

What affected the score

Penalties

Project activity

  • −3
    last release — 250 days
  • −1
    top author's share of commits — 60%
  • −<1
    last commit — 31 days

CI/CD

  • −12
    SourceCraft CI configurationmissing

Not measured — interval width

Not a penalty: the lower bound of the score counts the metric as zero, the upper bound as full

Documentation and best practices

  • up to −3
    docs directorydata not collected
  • up to −2
    contributing guidedata not collected

CI/CD

  • up to −12
    CI runsdata not collected

Code health

  • up to −15
    TODO/FIXME densitydata not collected

What will raise the score

by strength of impact
  • CI/CD
    +12
    add a SourceCraft CI configuration (.sourcecraft/ci.yaml); the service does not see external CISourceCraft CI configurationwhy: the build and the checks are reproducible for whoever takes the code
  • Activity
    +3
    publish a release or tag a versionlast release — 250 dayswhy: the build and the checks are reproducible for whoever takes the code
  • Activity
    +1
    share the work with other contributorstop author's share of commits — 60%why: the work does not rest on a single person
  • make a commit soon+<1