← 全部工具

delivery-intel

热度 65 更新于 开发与构建

Evidence-driven repo intelligence: DORA metrics, forensic signals, vulnerability scan, and delivery verdict for any GitHub repo. One command, no setup.

npmauto-collected

安装

npm
npm install -g delivery-intel

通过 npm 安装。

<div align="center"

delivery-intel

The repo trust engine for GitHub.

Evidence-driven intelligence that tells you whether a repo is safe to adopt, healthy to change, and disciplined enough to trust in CI.

</div

delivery-intel answers three questions — with evidence, not guesses: 1. Should I trust this repo? (trust score, 6 trust dimensions, 15 forensic signals) 2. Does it ship well and fail safely? (DORA metrics, vulnerability scan, change fail rate) 3. How does it compare? (side-by-side comparison of any two repos) Every metric shows its source, sample size, and confidence level. No fake precision.

---

⚡ Quick Start

# Trust verdict — should I adopt this repo? (trust score, dimensions, forensics)
npx delivery-intel facebook/react --mode adopt

# Compare two repos side-by-side
npx delivery-intel --compare facebook/react vercel/next.js

# Full delivery health check (v2 engine)
npx delivery-intel facebook/react --v2

# Classic metrics dump (v1 engine)
npx delivery-intel facebook/react
┌──────────────────────────────────────────────────────────────┐
│  facebook/react                                              │
│  Grade A-   Score 91/100   Confidence high                  │
│  Trend ↑ +4 pts                                             │
└──────────────────────────────────────────────────────────────┘

✓   NO POLICY VIOLATIONS
──────────────────────────────────────────────────────────────
  ✓ All delivery health policies are passing.

METRICS  (source · sample · confidence)
──────────────────────────────────────────────────────────────

◆ Change Lead Time 3.2h [high] committodeploy (84 PRs) ● Recovery Time 0.8h [med] deploymentfailures ◆ Change Fail Rate 4.8% [high] deploymentstatuses ● Pipeline Failures 8.2% [high] workflowruns (52 runs)

SIGNAL QUALITY ────────────────────────────────────────────────────────────── ◈ Production signal strength: high ✓ Scanned manifests: npm (package.json), Go (go.mod)

SECURITY ────────────────────────────────────────────────────────────── ✓ No known vulnerabilities found in scanned manifests


> Works with full URLs too: `npx delivery-intel https://github.com/vercel/next.js --v2`

---

## Why DORA metrics matter

Google's [2024 DORA Report](https://cloud.google.com/blog/products/devops-sre/announcing-the-2024-dora-report) (32,000+ respondents, 10 years of data):

| Metric | Elite teams | Low performers | Gap |
|--------|------------|----------------|-----|
| **Deploy Frequency** | On-demand (multiple/day) | < once per 6 months | **973×** |

| Change Failure Rate | 0–15% | 46–60% | — | | Time to Restore | < 1 hour | 1 week – 1 month | 6,570× |

Elite teams are 2× more likely to meet reliability targets and 1.8× more likely to meet business goals (DORA 2024).

---

Lead Time ★ Elite 3.2 hours median (0.1 days)