Skip to content

OSS hardening 1/4: community health files - #69

Closed
adamstankiewicz wants to merge 1 commit into
mainfrom
oss/community-health
Closed

OSS hardening 1/4: community health files#69
adamstankiewicz wants to merge 1 commit into
mainfrom
oss/community-health

Conversation

@adamstankiewicz

Copy link
Copy Markdown
Owner

First of a small stack hardening this repo as a true OSS project.

  • SECURITY.md — private vulnerability reporting via GitHub advisories, pre-1.0 support policy, and an honest known limitations section (no auth yet; don't deploy with real student data; the fixed-registry trust boundary is a security invariant).
  • GOVERNANCE.md — current single-maintainer reality written down, contract-change process (issue before PR for anything third parties program against), versioning intent, DCO certification.
  • CODE_OF_CONDUCT.md — Contributor Covenant 2.1 with a private reporting path.

Stack: 1/4 (this) → 2/4 issue/PR templates + CODEOWNERS + Dependabot → 3/4 vitest + first tests over the pure logic → 4/4 CI stale-artifact check for public/widget-shell.html.

🤖 Generated with Claude Code

SECURITY.md leads with honesty: private reporting via GitHub advisories,
main-only support pre-1.0, and a known-limitations section that tells
deployers plainly there is no auth yet and real student data should wait.
GOVERNANCE.md writes down what is already true (one maintainer, open
decisions, contract changes need an issue first) plus the goal state
(multi-org maintainers, DCO). CODE_OF_CONDUCT.md is Contributor Covenant
2.1 with a private reporting path.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@vercel

vercel Bot commented Aug 21, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
interactive-learning-experiences Ready Ready Preview Aug 21, 2026 11:20pm

Request Review

@adamstankiewicz

Copy link
Copy Markdown
Owner Author

Holding the stack as branches for now — will reopen when ready.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant