Skip to content

chore: add community health files, drop the stale netlify script - #62

Open
sidgaikwad wants to merge 1 commit into
unlayer:mainfrom
sidgaikwad:chore/repo-health
Open

chore: add community health files, drop the stale netlify script#62
sidgaikwad wants to merge 1 commit into
unlayer:mainfrom
sidgaikwad:chore/repo-health

Conversation

@sidgaikwad

Copy link
Copy Markdown
Contributor

Fixes #47.

.github/ held only dependabot.yml and workflows/, though this is a published MIT package that already merges outside contributions.

Added

  • SECURITY.md — there was no way to report a vulnerability privately. Points at GitHub private vulnerability reporting rather than an email address, and scopes the wrapper apart from the CDN editor and Unlayer's APIs so reports land in the right place.
  • CODE_OF_CONDUCT.md — Contributor Covenant 2.1, with attribution.
  • Issue forms. The bug form requires package version, React version and browser/framework — the round trip most reports currently need. config.yml routes account / entitlement / editor questions to Unlayer support instead of this repo.
  • PR template surfacing the CONTRIBUTING rules (Conventional Commits, exact pins, no console.log, 100% coverage) at the moment they apply.
  • .nvmrc (22, matching the CI checks job) and .editorconfig.

Removed

  • netlify-build from package.json. There's no netlify.toml in the repo and the README points the live demo at Vercel — a dead reference to a previous host.

Note

SECURITY.md assumes you'll enable private vulnerability reporting (Settings → Code security). If you'd rather use an email address, tell me which and I'll swap it — I didn't want to invent one.

Issue-form YAML validated as parsing; lint, test and Prettier clean.

.github/ held only dependabot.yml and workflows/, though the project is a
published MIT package that already merges outside contributions.

- SECURITY.md, pointing at GitHub private vulnerability reporting rather
  than a public issue, and scoping the wrapper apart from the CDN editor.
- CODE_OF_CONDUCT.md (Contributor Covenant 2.1).
- Issue forms for bugs and features. The bug form requires the package
  version, React version and environment, which is the round trip most
  reports currently need. config.yml routes account and editor questions
  to Unlayer support instead.
- A PR template checklist surfacing the CONTRIBUTING rules (Conventional
  Commits, exact pins, no console.log, 100% coverage) at the point they
  apply.
- .nvmrc matching the CI Node version, and .editorconfig carrying the
  Prettier basics into editors that do not run Prettier on save.

Also remove the netlify-build script: there is no netlify.toml in the repo
and the README points the live demo at Vercel, so it is a dead reference
to a previous host.
@vercel

vercel Bot commented Sep 4, 2026

Copy link
Copy Markdown

@sidgaikwad is attempting to deploy a commit to the Unlayer Team on Vercel.

A member of the Team first needs to authorize it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Repo health: missing SECURITY.md / CoC / issue + PR templates, stale netlify-build script, no .nvmrc

1 participant