Found at “Grade An API From Zero To One Hundred And Check Which Dimensions Were Actually Scored” on 2026-11-06T16:39:18+01:00.

Kin Lane examined how a linter works and wrote:

A lint report is a list. Two hundred and forty-two diagnostics on a three-operation Petstore is accurate and useless to the person who has to decide whether the API is ready.

Kin’s report showed several non-ideal situations. Here are two examples:

• One OpenAPI document had a score of 87 under a default rule catalog despite missing HTTPS and authentication.
• An internal linter crash on another OpenAPI document gave it a 100 score (the maximum).

What situations like these show is that rule automation isn’t the only thing that matters in API governance.

As I wrote in 2025, API governance is also about stakeholder empathy and business outcomes, not just automated linting.

“It’s the difference between an API that is well designed and one that someone can find, pay for, and trust,” as Kin wrote in his article.