| name | oss-standards |
| description | Pre-PR discipline for a public-by-default repo. What a reviewer enforces beyond CI: secrets and internal data in diffs or screenshots, docs that name their reader, and the cleaning pass where incomplete or confusing artifacts get dropped. Use before opening any PR against `gridaco/nothing` or when finalizing work for review.
|
oss-standards
Grida is open source. CI checks catch the mechanical failures —
format, lint, typecheck, tests, typos, generated-file freshness. This
skill is the extra bar a reviewer enforces because the repo is
public, the threat model is public, and the audience for every
artifact in a PR includes a stranger who arrived via Google.
The defaults that flip:
- Public-by-default. Names, comments, fixtures, screenshots,
commit messages — assume a stranger reads them first. There is no
internal channel; everything is the channel.
- Push = publish. A secret in a branch push is a published secret,
even if you delete the commit five minutes later. "I'll redact
before merge" is not a plan; rotation is.
- Incomplete is worse than absent. "I'll finish it next PR" lands
on
main, gets indexed, and becomes the example the next
contributor copies. Use draft: true, defer the PR, or just don't
ship — but don't ship half.
Code
Beyond what CI catches and what CLAUDE.md / naming / code-ts /
code-react already enforce:
- No personal TODOs.
// TODO(me): …, "fix later", "@username
knows" — private notes published. Either resolve, or rewrite as a
neutral TODO with a tracking issue link.
- No machine-specific paths. See the
links
pre-commit gate — absolute paths, , , and
untracked references resolve to nothing for anyone else.
