Skip to content

chore: standardize OSS hygiene templates (TaskFlow)#1

Merged
badhope merged 4 commits into
mainfrom
standardize/oss-templates
Jun 10, 2026
Merged

chore: standardize OSS hygiene templates (TaskFlow)#1
badhope merged 4 commits into
mainfrom
standardize/oss-templates

Conversation

@badhope

@badhope badhope commented Jun 9, 2026

Copy link
Copy Markdown
Owner

chore: standardize OSS hygiene templates

Add the community-health, security, and CI baseline that matches the rest of the badhope repos. None of the existing code or runtime behavior is changed.

What's added

  • .gitattributes — normalize line endings + mark vendored / generated / docs
  • .editorconfig — consistent indent / encoding across editors
  • .gitleaks.toml — global allowlist for tests / docs / samples
  • CITATION.cff — GitHub "Cite this repository" button (placeholders to fill)
  • .github/CODEOWNERS — default owner @badhope + security-sensitive paths
  • .github/ISSUE_TEMPLATE/bug_report.yml — structured bug reports
  • .github/ISSUE_TEMPLATE/feature_request.yml — problem-first feature requests
  • .github/dependabot.yml — weekly PRs for npm, github-actions
  • .github/workflows/ci.yml — node lint + test + build on push / PR

Why

  • SECURITY.md / CODE_OF_CONDUCT.md / CONTRIBUTING.md / CHANGELOG.md /
    CITATION.cff: standard OSS community files so contributors and security
    reporters know how to engage.
  • .gitattributes / .editorconfig / .gitleaks.toml: normalize line
    endings, encoding, and keep the secret-scanner quiet on docs / fixtures.
  • .github/CODEOWNERS: route reviews to @badhope.
  • .github/ISSUE_TEMPLATE/ + PULL_REQUEST_TEMPLATE.md: structured reports
    so triage and reproduction cost less.
  • .github/dependabot.yml: weekly dependency PRs grouped by ecosystem.
  • .github/workflows/gitleaks.yml: secret scanning on every push / PR.
  • .github/workflows/ci.yml: language-aware lint + test + build on every
    push / PR. Caches lockfile-keyed deps for fast runs.

Notes

  • The new CI workflow is permissive on purpose: it runs whatever lint /
    test / build scripts are present in package.json / pyproject.toml /
    Cargo.toml. Tighten it once you have a stable test command.
  • CITATION.cff has placeholders (__REPO_TITLE__, __KEYWORDS__). Edit
    the file to fill in real values before merging if you want GitHub's
    "Cite this repository" button to work.

badhope added 4 commits June 9, 2026 17:56
- Add community health files (SECURITY, CONTRIBUTING, CODE_OF_CONDUCT,
  CHANGELOG, CITATION.cff, .gitattributes, .editorconfig, .gitleaks.toml)
- Add .github/ templates (CODEOWNERS, PR template, issue templates)
- Add dependabot, gitleaks, and language-aware CI workflows
No code or runtime behavior changes.
The first commit of this PR used the standard OSS templates
(SECURITY, CONTRIBUTING, CODE_OF_CONDUCT, PR + issue templates)
that read like AI output. Overwrite with shorter, first-person,
less buzzwordy versions.

Sections below the cut-off in README.md are unchanged.
@badhope badhope merged commit 548c487 into main Jun 10, 2026
4 checks passed
@badhope badhope deleted the standardize/oss-templates branch June 10, 2026 06:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant