Start implementation according to plan#3
Merged
Conversation
Complete MVP implementation including: - Project structure with TypeScript, ESM support - Code quality tools: BiomeJS, Lefthook, Vitest, tsdown/pkgroll - 9 GitHub Actions workflows for CI/CD automation - Security features: SLSA Level 3, NPM provenance, CodeQL - Automated releases with release-please - Comprehensive documentation with TDD methodology - Claude Code integration - Sample code and tests demonstrating best practices Major components: - TypeScript 5 with strict mode and ESM-first approach - Dual bundler support (tsdown default, pkgroll alternative) - 80% test coverage enforcement with Vitest - Property-based testing with @fast-check - Automated dependency updates with Renovate - Matrix testing across Node 18, 20, 22 - Complete security scanning and attestation pipeline Documentation: - README.md with 13 badges and comprehensive guide - CONTRIBUTING.md with TDD workflow examples - SECURITY.md with vulnerability reporting - Architecture Decision Records (ADRs) - Branch protection and security deployment guides All workflows configured to skip on template repository and activate automatically when template is used.
github-actions
Bot
added
size/xl
documentation
Remove matrix testing strategy and test only on Linux Node 22. This simplifies CI/CD and reduces workflow execution time. Changes: - Remove matrix strategy from test.yml - Test only on ubuntu-latest with Node 22 - Update README.md to reflect single-platform testing
Add repository checks to skip workflows that require package-lock.json on the template repository itself. Workflows updated: - test: skip test job on template repo - fuzz: skip fuzz-pr job on template repo - security-pr: skip npm-audit, sbom, license-check jobs on template repo These workflows will activate automatically when template is used.
Contributor
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF ScorecardScorecard details
Scanned Files
|
- Replace sed with bash parameter expansion in auto-pr.yml - Quote all variable references to prevent word splitting - Group echo redirects to avoid SC2129 warnings - Add skip condition for dependency-review with setup instructions - Fix all SC2086 and SC2129 shellcheck errors across all workflows Affected files: - auto-pr.yml: Fixed SC2001 (sed), SC2086 (quotes), SC2129 (grouped echo) - dependency-review.yml: Added skip condition with documentation - fuzz.yml: Fixed SC2086 and SC2129 - release-please.yml: Fixed SC2086 and SC2129 - security-main.yml: Fixed SC2086 and SC2129 - security-pr.yml: Fixed SC2086 and SC2129 - test.yml: Fixed SC2086 (quoted GITHUB_STEP_SUMMARY)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Complete MVP implementation including:
Major components:
Documentation:
All workflows configured to skip on template repository and activate automatically when template is used.