# GitCheckup fix plan — astral-sh/ruff

**96/100 · grade A+** · rubric v2 · scored 2026-08-07T22:18:07.251Z

Completing everything below is worth **+3 points**, which would take this repository to **99/100 (A+)**.

Source: https://gitcheckup.com/r/astral-sh/ruff

---

## How to use this file

You are raising this repository's GitCheckup score. GitCheckup reads public
GitHub metadata only — it never sees the source — so every item below is
satisfied by a file, a repository setting, or a commit.

1. Work top-down. Items are ordered by the points they recover.
2. Write real content. A CONTRIBUTING.md that says "TODO" scores the same
   as one that helps, and is worse for the reader — the check is a proxy
   for the thing, not the point of it.
3. Do not touch anything under **Already passing** without a reason.
4. **Not actionable** is not a to-do list. Do not attempt those.
5. Some items are repository settings rather than files. They are marked.

---

## Where the points are

| Category | Earned | Available |
| --- | ---: | ---: |
| Docs | 25 | 25 |
| Community | 17 | 20 |
| Activity | 20 | 20 |
| Popularity | 14 | 15 |
| Hygiene | 20 | 20 |
| **Total** | **96** | **100** |

---

## What to fix

### Community — 17/20

- [ ] **Security policy** · +3 (currently 0/3)
      Add SECURITY.md so vulnerability reports reach you privately instead of a public issue.

---

## Not actionable — 1 points

Scored, but nothing you can do in the repository moves them. They are
listed so the arithmetic above adds up, not so they can be worked on.

- **Stars** — 10/11

---

## Already passing

Do not regress these.

- README present — 6/6
- README has real depth — 8/8
- Repository description set — 5/5
- Topics tagged — 4/4
- Homepage or docs link — 2/2
- LICENSE file present — 8/8
- Contributing guide — 4/4
- Code of conduct — 3/3
- Issue or PR templates — 2/2
- Pushed recently — 10/10
- Commit cadence over 90 days — 6/6
- Issue backlog in proportion — 4/4
- Forks — 4/4
- CI workflows configured — 8/8
- Not archived — 4/4
- Original, not a fork — 3/3
- Issues enabled — 3/3
- Language detected — 2/2