Evaluation report
Warningshan · plugin22c59c7· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/testdouble/han @ 22c59c7 — ★ 115 · Shell · MIT · last push yesterday
Manifest detected
kind=plugin slug=han · path=han/.claude-plugin · source=plugin.json
Slug is URL-safe
"han" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for plugin/han
Version is semver
4.5.1
Documentation
5 passedDescription quality
38 words · 312 chars — "Evidence-based planning, investigation, documentation, and review for solo and s…"
README is present and substantial
6,845 chars · 6 sections · 3 code blocks
Tags / topics declared
9 total — claude, claude-code, claude-code-plugin, claude-skills, code-review, documentation (+3)
README has usage / example sections
found: Installation
Homepage / docs URL declared
no homepage declared (registry will use the repo URL) — info-only, not blocking
Safety
2 passedLICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
3 passed1 warningPlugin: bundled artifacts presentwarn
Couldn't find a skills/ subdir or an MCP server config inside the plugin
A plugin is most useful when it bundles ≥ 1 skill or an MCP server.
Plugin: manifest fields complete
Plugin: bundle shape
empty bundle
Plugin: manifest location
manifest at plugin.json
Maintenance
1 passed2 warningsTests detectedwarn
no test/tests/__tests__/spec/t/ dirs, no JVM src/test/, and no JS/TS/Python/Go/Ruby/Elixir test files
Add tests (even a smoke test). Consumers gauge maintenance quality by their presence.
CI configuration detectedwarn
no CI config found (looked for GitHub Actions, CircleCI, GitLab CI, etc.)
Add a simple workflow (lint + test on PR) — it tells consumers the artifact is built reproducibly.
Recent activity
last push yesterday
Behavioral
Behavioral results aren't published for this artifact. The publisher sees the full report on their own dashboard.