Skip to content

chore: standardize OSS hygiene templates (TaskFlow)#1

Open
badhope wants to merge 1 commit into
mainfrom
standardize/oss-templates
Open

chore: standardize OSS hygiene templates (TaskFlow)#1
badhope wants to merge 1 commit into
mainfrom
standardize/oss-templates

Conversation

@badhope

@badhope badhope commented Jun 9, 2026

Copy link
Copy Markdown
Owner

chore: standardize OSS hygiene templates

Add the community-health, security, and CI baseline that matches the rest of the badhope repos. None of the existing code or runtime behavior is changed.

What's added

  • .gitattributes — normalize line endings + mark vendored / generated / docs
  • .editorconfig — consistent indent / encoding across editors
  • .gitleaks.toml — global allowlist for tests / docs / samples
  • CITATION.cff — GitHub "Cite this repository" button (placeholders to fill)
  • .github/CODEOWNERS — default owner @badhope + security-sensitive paths
  • .github/ISSUE_TEMPLATE/bug_report.yml — structured bug reports
  • .github/ISSUE_TEMPLATE/feature_request.yml — problem-first feature requests
  • .github/dependabot.yml — weekly PRs for npm, github-actions
  • .github/workflows/ci.yml — node lint + test + build on push / PR

Why

  • SECURITY.md / CODE_OF_CONDUCT.md / CONTRIBUTING.md / CHANGELOG.md /
    CITATION.cff: standard OSS community files so contributors and security
    reporters know how to engage.
  • .gitattributes / .editorconfig / .gitleaks.toml: normalize line
    endings, encoding, and keep the secret-scanner quiet on docs / fixtures.
  • .github/CODEOWNERS: route reviews to @badhope.
  • .github/ISSUE_TEMPLATE/ + PULL_REQUEST_TEMPLATE.md: structured reports
    so triage and reproduction cost less.
  • .github/dependabot.yml: weekly dependency PRs grouped by ecosystem.
  • .github/workflows/gitleaks.yml: secret scanning on every push / PR.
  • .github/workflows/ci.yml: language-aware lint + test + build on every
    push / PR. Caches lockfile-keyed deps for fast runs.

Notes

  • The new CI workflow is permissive on purpose: it runs whatever lint /
    test / build scripts are present in package.json / pyproject.toml /
    Cargo.toml. Tighten it once you have a stable test command.
  • CITATION.cff has placeholders (__REPO_TITLE__, __KEYWORDS__). Edit
    the file to fill in real values before merging if you want GitHub's
    "Cite this repository" button to work.

- Add community health files (SECURITY, CONTRIBUTING, CODE_OF_CONDUCT,
  CHANGELOG, CITATION.cff, .gitattributes, .editorconfig, .gitleaks.toml)
- Add .github/ templates (CODEOWNERS, PR template, issue templates)
- Add dependabot, gitleaks, and language-aware CI workflows
No code or runtime behavior changes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant