Skip to content

Security policy, sponsor button, PR template, Dependabot for actions - #74

Merged
LogicalError merged 2 commits into
mainfrom
repo-setup
Oct 26, 2026
Merged

LogicalError merged 2 commits into
mainfrom
repo-setup

Conversation

@LogicalError

Copy link
Copy Markdown
Member

Repository housekeeping, matching CustomAssetMetadata:

  • SECURITY.md: report security problems privately, through GitHub's vulnerability reporting (now enabled).
  • FUNDING.yml: the Sponsor button points at GitHub Sponsors for LogicalError.
  • Pull request template that follows CONTRIBUTING: what and why, the issue it fixes, how it was tested, no warnings, tests.
  • Dependabot keeps the workflow's actions (checkout, setup-python, lychee) up to date.
  • checks.yml only gets a read token.
  • CONTRIBUTING: pull requests are squash-merged and keep their author.

The package check passes locally (951 meta files, 0 problems).

- SECURITY: report privately through GitHub's vulnerability reporting.
- FUNDING: the Sponsor button points at GitHub Sponsors for LogicalError.
- A pull request template that follows CONTRIBUTING.
- Dependabot keeps the workflow's actions up to date.
- The checks workflow only gets a read token.
- CONTRIBUTING: pull requests are squash-merged and keep their author.
@LogicalError
LogicalError merged commit e6e5ae7 into main Oct 26, 2026
2 checks passed
@LogicalError
LogicalError deleted the repo-setup branch October 26, 2026 14:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant