Skip to the main content
The Repo Vitals mark: a pulse that ends in a commitREPO VITALS

applicable weight 65%

kinloguert-remird/juice-shop

Language: TypeScript
branch master
imported from GitHub

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

Open on SourceCraftDownload report (Markdown)snapshot 8 October 2026signal coverage 65%analysed 17 September 2026 at 20:09 UTC — part unavailable

What the 100 is made of

category weight
Documentation 20Activity 20Security 20CI/CD 15Issues 15Code health 10

The light segments — Security: will appear with a member token; Issues: the tracker is empty or not set up. The rest share their weight for now.

Six categories

earned / weight
Documentation and best practicessignal coverage 90%
20.5–23.4 / 30.8
partial
Project activitysignal coverage 88%
16.5–20.4 / 30.8
partial
Securitywill appear with a member token
no data
CI/CDsignal coverage 60%
13.8–23.1 / 23.1
partial
Issuesthe tracker is empty or not set up
no data
Code health
0–15.4 / 15.4
collection failed
States:
scored
partial
no data
weight goes to the rest
collection failed
interval, not zero
Not measured: CI runs
closed by the platform
will become a group once access opens
Not measured: docs directory, last release, TODO/FIXME density
couldn't see it
the platform's window was truncated: a deep file or a recent version may have fallen outside it

Strengths

what's already done
  • SourceCraft CI is configured
  • The README introduces the project
  • CI checks pull requests
  • Commits span the whole year (133 commits)
  • Work goes on without long pauses (8 weeks)

What affected the score

Penalties

Documentation and best practices

  • −3
    dependency lockfilemissing
  • −3
    review policyno protection
  • −1
    branch protection policyno protection
  • −<1
    share of short commit messages — 2%

Project activity

  • −4
    share of unanswered pull requests — 100%sample: 5 of 10
  • −3
    last commit — 302 days
  • −2
    share of closed pull requests — 50%window: 50 PRs, sample threshold: 5 of 10
  • −1
    top author's share of commits — 74%

Not measured — interval width

Not a penalty: the lower bound of the score counts the metric as zero, the upper bound as full

Documentation and best practices

  • up to −3
    docs directorydata not collected

Project activity

  • up to −4
    last releasedata not collected

CI/CD

  • up to −9
    CI runsdata not collected

Code health

  • up to −15
    TODO/FIXME densitydata not collected

What will raise the score

by strength of impact
  • Activity
    +4
    respond to pull requestsshare of unanswered pull requests — 100%why: an outside contributor gets an answer, and their work is not lostevidence: the repository's pull request list, snapshot of 8 October 2026
  • Activity
    +3
    make a commit soonlast commit — 302 dayswhy: the repository shows it is alive, not abandoned
  • Documentation
    +3
    add a dependency lockfiledependency lockfilewhy: the build and the checks are reproducible for whoever takes the code
  • set up a review policy+3
  • close pull requests+2
  • set up a branch protection policy+1
  • share the work with other contributors+1
  • write meaningful commit messages+<1