A CLI tool that analyzes GitHub repository health and generates quality reports.
Project description
RepoPulse
RepoPulse is a Python CLI tool that scans GitHub repositories and produces a practical health report with a score out of 100, clear warnings, and actionable recommendations.
It is built for developers who want a quick repository quality review from the terminal, and for maintainers who want a small tool they can later run in CI.
Quick Links
- Arabic README
- Spanish README
- Installation Guide
- Usage Guide
- Requirements
- Supported Checks
- JSON report contract
- Architecture
- Contributing
- Security Policy
- Roadmap
- License
- Changelog
- Publishing guide
- Releases
Why RepoPulse Matters
Open source maintainers repeat the same repository hygiene checks across projects: README quality, licensing, CI, tests, stale activity, sensitive file names, and basic security posture. RepoPulse turns those checks into a quick, repeatable report that can run locally or in automation.
The project is early-stage, but it is designed around practical maintainer workflows: fast triage, clear recommendations, CI thresholds, and machine-readable output for future automation.
Features
- Scan public GitHub repositories by URL.
- Scan a local directory offline (
repopulse scan .) without the GitHub API. - Emit GitHub-issue-ready recommendations with
--format issues. - Scan private repositories with
--tokenorGITHUB_TOKEN. - Fetch repository metadata and recursive file tree through the GitHub API (remote scans).
- Score repository health out of 100.
- Render a Rich terminal report.
- Export Markdown reports.
- Print or write JSON reports.
- Produce compact summaries for automation.
- Fail CI jobs with
--fail-under. - Compare two scans (
repopulse compare) with score/check deltas and--fail-on-regression. - Drop-in GitHub Actions example for CI health gates (examples/github-action-repopulse.yml).
- Customize check weights and default thresholds with
.repopulse.yml(optional named profiles:strict,library,docs,release). - Detect common sensitive file names without printing secret contents.
- Add advisory dependency and security baseline recommendations.
Tech Stack
RepoPulse is built with:
| Technology | Purpose |
|---|---|
| Python 3.11+ | Core runtime. |
| Typer | CLI commands and options. |
| Requests | GitHub API calls. |
| Rich | Terminal tables and formatted output. |
| Pydantic | Typed report and check models. |
| python-dotenv | Optional GITHUB_TOKEN loading. |
| Pytest | Test suite. |
| Ruff | Linting in CI. |
Installation
From PyPI — install name is repopulse-cli (not the unrelated PyPI package repopulse). CLI remains repopulse:
pip install repopulse-cli
repopulse --help
Or clone and install from source:
git clone https://github.com/3ssiri/RepoPulse.git
cd RepoPulse
pip install -e .
For development:
pip install -e ".[dev]"
See INSTALLATION.md for full setup notes.
Basic Usage
repopulse scan .
repopulse scan https://github.com/username/repository
repopulse scan https://github.com/username/repository --export report.md
repopulse scan https://github.com/username/repository --format json --output report.json
repopulse scan https://github.com/username/repository --fail-under 75
repopulse scan https://github.com/username/repository --config .repopulse.yml
repopulse scan https://github.com/username/private-repo --token YOUR_GITHUB_TOKEN
repopulse compare ./checkout-main ./checkout-pr --fail-on-regression
You can also set a token in the environment:
GITHUB_TOKEN=YOUR_GITHUB_TOKEN repopulse scan https://github.com/username/private-repo
See USAGE.md for all options and examples.
OSS Maintainer Use Cases
- Run repository health checks before releases.
- Add a
--fail-underthreshold to CI for project quality gates (see examples/github-action-repopulse.yml and USAGE.md). - Export Markdown reports for issue triage or maintainer handoff.
- Export JSON for dashboards, bots, or future AI-assisted review workflows.
- Audit public or private repositories without printing secret contents.
Example Output
RepoPulse Health Report for psf/requests
Score: 91 / 100 - Excellent
Checks
README Quality PASS 16/20
License PASS 10/10
.gitignore PASS 10/10
Tests WARN 12/15
GitHub Actions PASS 15/15
Scoring System
| Check | Points |
|---|---|
| README Quality | 20 |
| License | 10 |
| .gitignore | 10 |
| Tests | 15 |
| GitHub Actions | 15 |
| Recent Activity | 10 |
| Sensitive Files | 10 |
| Project Structure | 5 |
| Package Scripts | 5 |
Grades:
| Score | Grade |
|---|---|
| 90-100 | Excellent |
| 75-89 | Good |
| 60-74 | Fair |
| 40-59 | Weak |
| 0-39 | Critical |
Dependency and security baseline checks are advisory in v0.1.0; they add recommendations without changing the 100-point score.
Configuration
RepoPulse automatically reads .repopulse.yml from the current directory when present. You can also pass a file explicitly:
repopulse scan https://github.com/username/repository --config examples/repopulse.yml
Configuration supports default CI thresholds, disabled checks, and custom weights:
fail_under: 85
disabled_checks:
- activity
weights:
readme: 25
tests: 20
github_actions: 20
See examples/repopulse.yml for a complete example.
Supported Checks
- README completeness.
- License presence.
.gitignorepresence and common patterns.- Test folders, test files, and package test commands.
- GitHub Actions workflows for CI, tests, linting, and builds.
- Recent activity based on
pushed_at. - Sensitive file names such as
.env,credentials.json, and private keys. - Project structure and root clutter.
- Package scripts or Python project configuration.
- Dependency hygiene through lockfiles and Dependabot.
- Security baseline through
SECURITY.md, Dependabot, and CodeQL.
Full details are in docs/checks.md.
Requirements
- Python 3.11 or newer.
- Network access to
api.github.com. - GitHub token for private repositories or higher API rate limits.
See REQUIREMENTS.md for runtime and development requirements.
Contributing
Contributions are welcome. Keep checks independent, return CheckResult, and add focused tests for new behavior.
See CONTRIBUTING.md for setup, testing, and contribution workflow.
License
RepoPulse is released under the MIT License. See LICENSE.
Project details
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file repopulse_cli-0.3.1.tar.gz.
File metadata
- Download URL: repopulse_cli-0.3.1.tar.gz
- Upload date:
- Size: 41.6 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
e47860c79e04212cf44e03430ec8d257a12bc80add94588a72fd8ae3f72bfcc7
|
|
| MD5 |
bcfcbe72fe2a9e11b5a19ab6b82349fe
|
|
| BLAKE2b-256 |
26c4d7eeae3422de5183f524400e8114a90fe87b25485894483c50943ca03a18
|
Provenance
The following attestation bundles were made for repopulse_cli-0.3.1.tar.gz:
Publisher:
release.yml on 3ssiri/RepoPulse
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
repopulse_cli-0.3.1.tar.gz -
Subject digest:
e47860c79e04212cf44e03430ec8d257a12bc80add94588a72fd8ae3f72bfcc7 - Sigstore transparency entry: 2337603207
- Sigstore integration time:
-
Permalink:
3ssiri/RepoPulse@60fac44a12c95a46c354f94dea10c4df63b83682 -
Branch / Tag:
refs/tags/v0.3.1 - Owner: https://github.com/3ssiri
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@60fac44a12c95a46c354f94dea10c4df63b83682 -
Trigger Event:
push
-
Statement type:
File details
Details for the file repopulse_cli-0.3.1-py3-none-any.whl.
File metadata
- Download URL: repopulse_cli-0.3.1-py3-none-any.whl
- Upload date:
- Size: 36.5 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
bb9422bd0daa6adeac91b27920ce71416b826cb7dfbf594d40df769f5213e0e0
|
|
| MD5 |
51b3fc78bc442f36239d2c4fea4d915b
|
|
| BLAKE2b-256 |
6dadccc66fdbdd8e686bb5a120095fa784874551e23aa6c246d62d15a6b0b356
|
Provenance
The following attestation bundles were made for repopulse_cli-0.3.1-py3-none-any.whl:
Publisher:
release.yml on 3ssiri/RepoPulse
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
repopulse_cli-0.3.1-py3-none-any.whl -
Subject digest:
bb9422bd0daa6adeac91b27920ce71416b826cb7dfbf594d40df769f5213e0e0 - Sigstore transparency entry: 2337603211
- Sigstore integration time:
-
Permalink:
3ssiri/RepoPulse@60fac44a12c95a46c354f94dea10c4df63b83682 -
Branch / Tag:
refs/tags/v0.3.1 - Owner: https://github.com/3ssiri
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@60fac44a12c95a46c354f94dea10c4df63b83682 -
Trigger Event:
push
-
Statement type: