All Reports
Zod
TypeScript
colinhacks/zod
Pass Rate
27%
TypeScript-first schema validation with static type inference
L1100%
L235%
L30%
L40%
L50%
Strong Build System
Zod reaches Level 2 with 56% Build System pass rate. Currently building team readiness with 18/66 criteria passing (27%). Key areas for improvement include the opportunities listed below.
Strengths
01
Pre Commit Hooks
.husky/pre-commit with lint-staged configured at root, applies to both packages (2/2 apps pass).
02
Strict Typing
Both packages have strict: true in tsconfig. packages/zod uses tsconfig.base.json with comprehensive strict flags (2/2 apps pass).
03
Type Check
Both packages/zod and packages/docs have tsconfig.json with strict: true enabled (2/2 apps pass).
Opportunities
01
Cyclomatic Complexity
Add complexity analysis to identify and refactor overly complex functions.
02
Feature Flag Infrastructure
Add feature flags to enable safer deployments and gradual rollouts.
03
Monorepo Tooling
Consider Turborepo or Nx for better caching, incremental builds, and dependency graph awareness.
All Criteria
Style & Validation3/11 (27%)
✗code_modularizationpackages/zod has no eslint-plugin-boundaries or module boundary enforcement. packages/docs is small (skipped).
✗cyclomatic_complexitypackages/zod has biome.jsonc with complexity rules. packages/docs has no complexity analysis (0/2 apps pass).
✗dead_code_detectionNo knip, ts-prune, unimported, or dead code detection tools configured for either package (0/2 apps pass).
✗duplicate_code_detectionNo jscpd, PMD CPD, or duplicate code detection tools configured for either package (0/2 apps pass).
✗formatterpackages/zod has biome.jsonc formatter configured. packages/docs has no dedicated formatter (0/2 apps pass).
—large_file_detectionNo evidence of git hooks, CI jobs, or linter rules checking file size/line count. No .gitattributes with LFS configured.
✗lint_configpackages/zod has biome.jsonc linter configured. packages/docs has no dedicated linter config (0/2 apps pass).
—n_plus_one_detectionBoth packages have no database/ORM usage (library and static docs site), N+1 detection not applicable.
✗naming_consistencyNo ESLint naming-convention rules, no naming conventions in AGENTS.md/CONTRIBUTING.md for either app (0/2 apps pass).
✓pre_commit_hooks.husky/pre-commit with lint-staged configured at root, applies to both packages (2/2 apps pass).
✓strict_typingBoth packages have strict: true in tsconfig. packages/zod uses tsconfig.base.json with comprehensive strict flags (2/2 apps pass).
✗tech_debt_trackingNo TODO/FIXME scanner in CI, no linter rules for tech debt tracking, no SonarQube/SonarCloud integration found.
✓type_checkBoth packages/zod and packages/docs have tsconfig.json with strict: true enabled (2/2 apps pass).
Build System9/16 (56%)
✗agentic_developmentNo agent co-authorship found in git log history. No evidence of droid/Claude co-authors in recent commits.
✓automated_pr_reviewBoth Pullfrog and Claude Code Review workflows exist, automatically generating review comments on PRs.
✓build_cmd_docAGENTS.md and README.md document build commands: 'pnpm build' and test commands clearly listed.
✗build_performance_trackingNo build caching (turbo/nx), no build metrics exported, no evidence of deliberate build performance monitoring.
—dead_feature_flag_detectionPrerequisite feature_flag_infrastructure not configured, cannot evaluate dead flag detection.
✓deployment_frequency30 releases in recent months (v4.3.5 to v4.0.9), averaging multiple deployments per week with automation.
✓deps_pinnedpnpm-lock.yaml committed to repository, ensuring reproducible builds across environments.
✓fast_ci_feedbackCI completes in ~1-2 minutes based on statusCheckRollup analysis (e.g., 2026-01-02 run: 23:52:40Z to 23:54:21Z).
✗feature_flag_infrastructureNo LaunchDarkly, Statsig, Unleash, GrowthBook, or custom feature flag system found in codebase.
✗heavy_dependency_detectionpackages/docs has no bundle analyzer or size limit tools. packages/zod is library (skipped).
✗monorepo_toolingUses pnpm workspaces but no Turborepo, Nx, or Lerna for advanced monorepo management and build optimization.
—progressive_rolloutLibrary repository published to npm, not an infrastructure/deployed service requiring canary deployments.
✓release_automation.github/workflows/release.yml automates npm publishing, JSR publishing, and GitHub releases on main branch changes.
✓release_notes_automation.github/workflows/release.yml uses release-changelog-builder-action to automatically generate release notes.
—rollback_automationLibrary repository published to npm, not an infrastructure-based deployment requiring rollback automation.
✓single_command_setupAGENTS.md documents 'pnpm install && pnpm build' for setup, and devcontainer uses 'pnpm i' as postCreateCommand.
✗unused_dependencies_detectionNo depcheck, npm-check, knip, or unused dependency detection configured for either package (0/2 apps pass).
✓vcs_cli_toolsGitHub CLI (gh) is installed and authenticated, verified with 'gh auth status' showing active account.
✗version_drift_detectionNo syncpack, manypkg, or version consistency tooling found for detecting dependency drift across packages.
Testing0/8 (0%)
✗flaky_test_detectionNo jest-retry, pytest-rerunfailures, or flaky test tracking configured. packages/docs has no tests (skipped).
✗integration_tests_existpackages/integration exists with integration fixtures. packages/docs has no integration tests (0/2 apps pass).
✗test_coverage_thresholdsvitest.config.ts has no coverage thresholds, no Codecov/Coveralls configuration for either package (0/2 apps pass).
✗test_isolationvitest.config.ts has isolate: true for packages/zod. packages/docs has no tests (0/2 apps pass).
✗test_naming_conventionspackages/zod uses Vitest default *.test.ts patterns. packages/docs has no tests or conventions (0/2 apps pass).
✗test_performance_trackingNo test timing output configured, no test analytics platforms, no duration tracking for either package (0/2 apps pass).
✗unit_tests_existpackages/zod has extensive .test.ts files in src/v3/tests/ and src/v4/classic/tests/. packages/docs has no tests (0/2 apps pass).
—unit_tests_runnableRequires local test execution environment to verify (skipped).
Documentation3/7 (43%)
✓agents_mdAGENTS.md exists at repo root with 1500+ characters, documents commands, rules, and development workflow.
✗agents_md_validationNo CI job validating AGENTS.md commands, no automated updates, no pre-commit validation of documentation.
—api_schema_docspackages/zod is a library, packages/docs is a static site. Neither has service APIs requiring OpenAPI/Swagger.
✗automated_doc_generationNo API doc generators, code comment extractors, or automated documentation workflows found.
✓documentation_freshnessREADME.md, AGENTS.md, and CONTRIBUTING.md all modified within last 180 days (git log verification).
✓readmeREADME.md exists at repo root with comprehensive setup instructions, features, and installation guide.
✗service_flow_documentedNo architecture diagrams (.mermaid, .puml), no docs/architecture/, no service dependency documentation found.
✗skillsNo skills directories found in .factory/skills/, .skills/, or .claude/skills/ locations.
Dev Environment1/2 (50%)
—database_schemaNeither package uses databases (no Prisma schema, TypeORM entities, or SQL schemas found).
✓devcontainer.devcontainer/devcontainer.json exists with Node.js/TypeScript image and pnpm install postCreateCommand.
—devcontainer_runnableCannot verify devcontainer builds successfully without devcontainer CLI installed.
✗env_templateNo .env.example file found, though .env is gitignored. Environment variables not documented in README/AGENTS.md.
—local_services_setupLibrary repository without external service dependencies (no Postgres, Redis, etc. required).
Debugging & Observability0/8 (0%)
✗alerting_configuredNo PagerDuty, OpsGenie, or alerting rules configured for either package (0/2 apps pass).
—circuit_breakersNeither package has external service dependencies requiring circuit breaker patterns.
—code_quality_metricsRequires GitHub admin API access to verify code quality metrics (skipped).
✗deployment_observabilityNo monitoring dashboard links (Datadog, Grafana) or deploy notification integrations found (0/2 apps pass).
✗distributed_tracingNo OpenTelemetry, X-Request-ID, or trace ID propagation found in either package (0/2 apps pass).
✗error_tracking_contextualizedNo Sentry, Bugsnag, or Rollbar configured in either package dependencies (0/2 apps pass).
—health_checkspackages/zod is library, packages/docs is static Next.js site. Health check endpoints not applicable.
✗metrics_collectionNo Datadog, Axiom, Prometheus, or metrics instrumentation found for either package (0/2 apps pass).
—profiling_instrumentationLibrary and docs site where profiling infrastructure is not meaningful.
✗runbooks_documentedNo runbooks/ directory, no references to external runbook links in README/AGENTS.md/docs.
✗structured_loggingNo winston, pino, bunyan, or logging libraries in package.json dependencies for either package (0/2 apps pass).
Security2/8 (25%)
—automated_security_reviewRequires GitHub admin API access to verify automated security review (skipped).
—branch_protectionRequires GitHub admin API access to verify branch protection rules (skipped).
✗codeownersNo CODEOWNERS file found in root or .github/ directory.
—dast_scanningpackages/zod is library, packages/docs is static site. DAST scanning not applicable.
✗dependency_update_automationNo Dependabot config (.github/dependabot.yml) or Renovate config (renovate.json) found.
✓gitignore_comprehensive.gitignore properly excludes .env files, node_modules, build artifacts (dist, lib), and IDE configs (.idea).
✗log_scrubbingNo log sanitization/redaction configured, no logging libraries with redaction support for either package (0/2 apps pass).
—pii_handlingNeither package processes personal/user data. PII handling tooling not applicable.
—privacy_complianceLibrary repository that doesn't collect end-user data, privacy compliance infrastructure not applicable.
—secret_scanningRequires GitHub admin API access to verify secret scanning configuration (skipped).
✓secrets_management.env properly gitignored, GitHub Actions workflows use secrets.* references without hardcoded values.
Task Discovery0/4 (0%)
✗backlog_health50 open issues examined, 0% have labels. Cannot assess title quality or stale issues without basic labeling.
✗issue_labeling_systemChecked 50 open issues, all have empty labels array. No priority/type/area labeling system in use.
✗issue_templatesNo .github/ISSUE_TEMPLATE/ directory or issue template files found.
✗pr_templatesNo .github/pull_request_template.md or PR template files found.
Product & Analytics0/2 (0%)
✗error_to_insight_pipelineNo Sentry-GitHub integration, no error-to-issue automation configured for either package (0/2 apps pass).
✗product_analytics_instrumentationpackages/docs has @vercel/analytics v1.5.0. packages/zod is library without product analytics (0/2 apps pass).