Files
Evil0ctal ab0829da9d chore: the community files a 20k-star repository should already have had
GitHub scored this repository's community profile at 42%: a licence and a README
and nothing else. The gap is not cosmetic - CONTRIBUTING and SECURITY are what
GitHub links to from the issue and pull-request pages, so their absence means a
first-time contributor is shown nothing.

Pull request template, bilingual. GitHub has no chooser for pull requests the way
it has for issues, so the default is both languages in one file and single
-language variants sit in .github/PULL_REQUEST_TEMPLATE/ behind ?template=.
Its checklist is the one already in the contributing guide - make fmt, lint,
type, test, npm run verify, both documentation languages, the six hygiene rules -
plus one the guide did not have: no credentials in the diff or the description.
The guide's line saying there is no template is now false, and is updated.

CONTRIBUTING.md is short on purpose. The real guide is 500 lines in
documents/{en,zh}/16-contributing.md and duplicating it here would produce two
that disagree within a month. What it does carry is the three things people
actually trip on: source is English, documentation moves in both languages, and
never a credential - the last one because v4 shipped a live session in a tracked
config file.

SECURITY.md says what is in scope and, more usefully, what is not. Platform rate
limiting and risk control are not vulnerabilities, and neither is binding to
0.0.0.0 on a public host after the documentation told you what that costs.

Code of conduct is Contributor Covenant 2.1, verbatim in both languages from the
upstream texts rather than paraphrased - the point of a standard one is that a
contributor already knows what it says.

Dependabot is monthly and grouped, not weekly and per-package. One maintainer
drowns in the defaults, and a stack of ignored bot pull requests teaches you to
skim past the security ones too.

.gitattributes normalises line endings. Nothing tracked has CRLF today; this
keeps it that way, because a \r on the end of an entrypoint shebang fails as
"not found" and names the file rather than the character.
2026-09-10 09:28:23 -07:00

7 lines
308 B
Plaintext

# Everything is reviewed by the maintainer. One line, because there is one of him.
#
# The value of this file for a single-maintainer project is not the routing - it
# is that GitHub requests the review automatically, so a pull request never sits
# unassigned because nobody pressed a button.
* @Evil0ctal