Profile completeness measures whether an organization is accountable and clearly presented: a verified real-world identity, a stated purpose, and working ways to reach it. For anyone deciding whether to depend on an organization's software, the profile is the difference between an institution and an anonymous namespace.
- Assessment: organization, Governance & Profile category (100% within category)
- Weight in organization overall: 25%
- Metric key:
profile_completeness
How the value is computed
| Component | Weight | Evidence |
|---|---|---|
| Verified domain | 25 | domain verification completed on GitHub |
| Description | 20 | the organization's description field |
| Homepage | 15 | a working website URL |
| Display name | 10 | a human-readable name beyond the login |
| Location | 10 | a stated location |
| Contact email | 10 | a public contact address |
| Social profile | 10 | at least one linked social account |
Why a profile is governance evidence
- Domain verification is the anchor — and the heaviest component. It cryptographically ties the GitHub organization to a real-world domain, which is genuine supply-chain evidence: it forecloses a whole class of namespace-impersonation attacks. The same signal feeds each repository's stewardship metric.
- Description, homepage, and name establish what the organization is and where its canonical presence lives.
- Location, email, and social links are accountability surface: routes by which a security researcher, a packager, or a legal team can actually make contact.
Reading the result
- This is the most directly actionable metric in the organization assessment — every component is a settings field, and the whole checklist can be completed in under an hour.
- An incomplete profile on an otherwise strong organization usually indicates neglect rather than concealment — but the record can only publish what is visible, and the metric reads accordingly.
Improving the value
- Verify the organization's domain in GitHub settings — the single largest component.
- Fill every profile field: description, homepage, display name, location, public email, and at least one social profile.
Related: stewardship · organization assessment