All Reports
Zod
TypeScript
colinhacks/zod
Pass Rate
27%
TypeScript-first schema validation with static type inference
L1100%
L235%
L30%
L40%
L50%
Strong Build System
Zod reaches Level 2 with 56% Build System pass rate. Currently building team readiness with 18/66 criteria passing (27%). Key areas for improvement include the opportunities listed below.
Strengths
01
Pre Commit Hooks
.husky/pre-commit with lint-staged configured at root, applies to both packages (2/2 apps pass).
02
Strict Typing
Both packages have strict: true in tsconfig. packages/zod uses tsconfig.base.json with comprehensive strict flags (2/2 apps pass).
03
Type Check
Both packages/zod and packages/docs have tsconfig.json with strict: true enabled (2/2 apps pass).
Opportunities
01
Code Modularization
packages/zod has no eslint-plugin-boundaries or module boundary enforcement. packages/docs is small (skipped).
02
Cyclomatic Complexity
packages/zod has biome.jsonc with complexity rules. packages/docs has no complexity analysis (0/2 apps pass).
03
Dead Code Detection
No knip, ts-prune, unimported, or dead code detection tools configured for either package (0/2 apps pass).
All Criteria
Style & Validation3/11 (27%)
✗code_modularizationpackages/zod has no eslint-plugin-boundaries or module boundary enforcement. packages/docs is small (skipped).
✗cyclomatic_complexitypackages/zod has biome.jsonc with complexity rules. packages/docs has no complexity analysis (0/2 apps pass).
✗dead_code_detectionNo knip, ts-prune, unimported, or dead code detection tools configured for either package (0/2 apps pass).
✗duplicate_code_detectionNo jscpd, PMD CPD, or duplicate code detection tools configured for either package (0/2 apps pass).
✗formatterpackages/zod has biome.jsonc formatter configured. packages/docs has no dedicated formatter (0/2 apps pass).
—large_file_detectionNo evidence of git hooks, CI jobs, or linter rules checking file size/line count. No .gitattributes with LFS configured.
✗lint_configpackages/zod has biome.jsonc linter configured. packages/docs has no dedicated linter config (0/2 apps pass).
—n_plus_one_detectionBoth packages have no database/ORM usage (library and static docs site), N+1 detection not applicable.
✗naming_consistencyNo ESLint naming-convention rules, no naming conventions in AGENTS.md/CONTRIBUTING.md for either app (0/2 apps pass).
✓pre_commit_hooks.husky/pre-commit with lint-staged configured at root, applies to both packages (2/2 apps pass).
✓strict_typingBoth packages have strict: true in tsconfig. packages/zod uses tsconfig.base.json with comprehensive strict flags (2/2 apps pass).
✗tech_debt_trackingNo TODO/FIXME scanner in CI, no linter rules for tech debt tracking, no SonarQube/SonarCloud integration found.
✓type_checkBoth packages/zod and packages/docs have tsconfig.json with strict: true enabled (2/2 apps pass).
Build System9/16 (56%)
✗agentic_developmentNo agent co-authorship found in git log history. No evidence of droid/Claude co-authors in recent commits.
✓automated_pr_reviewBoth Pullfrog and Claude Code Review workflows exist, automatically generating review comments on PRs.
✓build_cmd_docAGENTS.md and README.md document build commands: 'pnpm build' and test commands clearly listed.
✗build_performance_trackingNo build caching (turbo/nx), no build metrics exported, no evidence of deliberate build performance monitoring.
—dead_feature_flag_detectionPrerequisite feature_flag_infrastructure not configured, cannot evaluate dead flag detection.
✓deployment_frequency30 releases in recent months (v4.3.5 to v4.0.9), averaging multiple deployments per week with automation.
✓deps_pinnedpnpm-lock.yaml committed to repository, ensuring reproducible builds across environments.
✓fast_ci_feedbackCI completes in ~1-2 minutes based on statusCheckRollup analysis (e.g., 2026-01-02 run: 23:52:40Z to 23:54:21Z).
✗feature_flag_infrastructureNo LaunchDarkly, Statsig, Unleash, GrowthBook, or custom feature flag system found in codebase.
✗heavy_dependency_detectionpackages/docs has no bundle analyzer or size limit tools. packages/zod is library (skipped).
✗monorepo_toolingUses pnpm workspaces but no Turborepo, Nx, or Lerna for advanced monorepo management and build optimization.
—progressive_rolloutLibrary repository published to npm, not an infrastructure/deployed service requiring canary deployments.
✓release_automation.github/workflows/release.yml automates npm publishing, JSR publishing, and GitHub releases on main branch changes.
✓release_notes_automation.github/workflows/release.yml uses release-changelog-builder-action to automatically generate release notes.
—rollback_automationLibrary repository published to npm, not an infrastructure-based deployment requiring rollback automation.
✓single_command_setupAGENTS.md documents 'pnpm install && pnpm build' for setup, and devcontainer uses 'pnpm i' as postCreateCommand.
✗unused_dependencies_detectionNo depcheck, npm-check, knip, or unused dependency detection configured for either package (0/2 apps pass).
✓vcs_cli_toolsGitHub CLI (gh) is installed and authenticated, verified with 'gh auth status' showing active account.
✗version_drift_detectionNo syncpack, manypkg, or version consistency tooling found for detecting dependency drift across packages.
Testing0/8 (0%)
✗flaky_test_detectionNo jest-retry, pytest-rerunfailures, or flaky test tracking configured. packages/docs has no tests (skipped).
✗integration_tests_existpackages/integration exists with integration fixtures. packages/docs has no integration tests (0/2 apps pass).
✗test_coverage_thresholdsvitest.config.ts has no coverage thresholds, no Codecov/Coveralls configuration for either package (0/2 apps pass).
✗test_isolationvitest.config.ts has isolate: true for packages/zod. packages/docs has no tests (0/2 apps pass).
✗test_naming_conventionspackages/zod uses Vitest default *.test.ts patterns. packages/docs has no tests or conventions (0/2 apps pass).
✗test_performance_trackingNo test timing output configured, no test analytics platforms, no duration tracking for either package (0/2 apps pass).
✗unit_tests_existpackages/zod has extensive .test.ts files in src/v3/tests/ and src/v4/classic/tests/. packages/docs has no tests (0/2 apps pass).
—unit_tests_runnableRequires local test execution environment to verify (skipped).
Documentation3/7 (43%)
✓agents_mdAGENTS.md exists at repo root with 1500+ characters, documents commands, rules, and development workflow.
✗agents_md_validationNo CI job validating AGENTS.md commands, no automated updates, no pre-commit validation of documentation.
—api_schema_docspackages/zod is a library, packages/docs is a static site. Neither has service APIs requiring OpenAPI/Swagger.
✗automated_doc_generationNo API doc generators, code comment extractors, or automated documentation workflows found.
✓documentation_freshnessREADME.md, AGENTS.md, and CONTRIBUTING.md all modified within last 180 days (git log verification).
✓readmeREADME.md exists at repo root with comprehensive setup instructions, features, and installation guide.
✗service_flow_documentedNo architecture diagrams (.mermaid, .puml), no docs/architecture/, no service dependency documentation found.
✗skillsNo skills directories found in .factory/skills/, .skills/, or .claude/skills/ locations.
Dev Environment1/2 (50%)
—database_schemaNeither package uses databases (no Prisma schema, TypeORM entities, or SQL schemas found).
✓devcontainer.devcontainer/devcontainer.json exists with Node.js/TypeScript image and pnpm install postCreateCommand.
—devcontainer_runnableCannot verify devcontainer builds successfully without devcontainer CLI installed.
✗env_templateNo .env.example file found, though .env is gitignored. Environment variables not documented in README/AGENTS.md.
—local_services_setupLibrary repository without external service dependencies (no Postgres, Redis, etc. required).
Debugging & Observability0/8 (0%)
✗alerting_configuredNo PagerDuty, OpsGenie, or alerting rules configured for either package (0/2 apps pass).
—circuit_breakersNeither package has external service dependencies requiring circuit breaker patterns.
—code_quality_metricsRequires GitHub admin API access to verify code quality metrics (skipped).
✗deployment_observabilityNo monitoring dashboard links (Datadog, Grafana) or deploy notification integrations found (0/2 apps pass).
✗distributed_tracingNo OpenTelemetry, X-Request-ID, or trace ID propagation found in either package (0/2 apps pass).
✗error_tracking_contextualizedNo Sentry, Bugsnag, or Rollbar configured in either package dependencies (0/2 apps pass).
—health_checkspackages/zod is library, packages/docs is static Next.js site. Health check endpoints not applicable.
✗metrics_collectionNo Datadog, Axiom, Prometheus, or metrics instrumentation found for either package (0/2 apps pass).
—profiling_instrumentationLibrary and docs site where profiling infrastructure is not meaningful.
✗runbooks_documentedNo runbooks/ directory, no references to external runbook links in README/AGENTS.md/docs.
✗structured_loggingNo winston, pino, bunyan, or logging libraries in package.json dependencies for either package (0/2 apps pass).
Security2/8 (25%)
—automated_security_reviewRequires GitHub admin API access to verify automated security review (skipped).
—branch_protectionRequires GitHub admin API access to verify branch protection rules (skipped).
✗codeownersNo CODEOWNERS file found in root or .github/ directory.
—dast_scanningpackages/zod is library, packages/docs is static site. DAST scanning not applicable.
✗dependency_update_automationNo Dependabot config (.github/dependabot.yml) or Renovate config (renovate.json) found.
✓gitignore_comprehensive.gitignore properly excludes .env files, node_modules, build artifacts (dist, lib), and IDE configs (.idea).
✗log_scrubbingNo log sanitization/redaction configured, no logging libraries with redaction support for either package (0/2 apps pass).
—pii_handlingNeither package processes personal/user data. PII handling tooling not applicable.
—privacy_complianceLibrary repository that doesn't collect end-user data, privacy compliance infrastructure not applicable.
—secret_scanningRequires GitHub admin API access to verify secret scanning configuration (skipped).
✓secrets_management.env properly gitignored, GitHub Actions workflows use secrets.* references without hardcoded values.
Task Discovery0/4 (0%)
✗backlog_health50 open issues examined, 0% have labels. Cannot assess title quality or stale issues without basic labeling.
✗issue_labeling_systemChecked 50 open issues, all have empty labels array. No priority/type/area labeling system in use.
✗issue_templatesNo .github/ISSUE_TEMPLATE/ directory or issue template files found.
✗pr_templatesNo .github/pull_request_template.md or PR template files found.
Product & Analytics0/2 (0%)
✗error_to_insight_pipelineNo Sentry-GitHub integration, no error-to-issue automation configured for either package (0/2 apps pass).
✗product_analytics_instrumentationpackages/docs has @vercel/analytics v1.5.0. packages/zod is library without product analytics (0/2 apps pass).