Disputes and re-scoring

Scores are automated, and they can be wrong. If you maintain a repository and think its score is inaccurate, or it has changed since it was scored, open a dispute.

1. On the repository's page, choose Dispute this score or request a re-score. That opens a short issue form with the repository and commit filled in.
2. Say which pillar is wrong and why, and link to evidence if you can: a commit, a file, or a policy.
3. We re-score at the latest commit. If the scorer was wrong, we fix the method for everyone and note it in the changelog. We do not hand-edit individual scores.

You can request a re-score after a significant change, such as fixing vulnerabilities, adding tests, or adding a security policy. Popular repositories are also re-scored regularly.

Scores attach to repositories, not people. We never name or judge individual authors.