Skip to content

Add /contributing and /security pages - #590

Merged
simonhamp merged 1 commit into
mainfrom
contributing-security-pages
Oct 29, 2026
Merged

simonhamp merged 1 commit into
mainfrom
contributing-security-pages

Conversation

@simonhamp

Copy link
Copy Markdown
Member

Adds two static pages at the site root and links both from the footer.

/contributing combines the mobile docs contributing guide with the desktop CONTRIBUTING.md. It lists which repo to use for mobile, desktop, docs and plugins, then covers the fork and PR workflow, the PR guidelines, composer qa, bug reports and the Code of Conduct. I added a credit line for the Contributor Covenant 2.1, which the Code of Conduct text comes from.

/security is based on the mobile-air SECURITY.md:

  • Each of the 22 public first-party packages on Packagist gets a link to GitHub's private "Report a vulnerability" form. Private vulnerability reporting is now turned on for all 22 repos.
  • Bifrost, nativephp.com and private first-party plugins go to support@nativephp.com.
  • Third-party plugins go to the support contact on the plugin's directory page, with the report form as a fallback.

Things to check:

  • The package list is hardcoded in the view. New public packages need adding there by hand.
  • I left out mobile-shader (not on Packagist yet), Jump and the demo apps. mobile-ota is included even though its repo description says "Do not publish", because it's on Packagist with releases.
  • The other repos' CONTRIBUTING.md, SECURITY.md and the docs contributing page haven't changed. They can point here later.

🤖 Generated with Claude Code

The contributing page combines the mobile docs' contributing guide with
the desktop repo's CONTRIBUTING.md, so there's one place covering both
plus the docs and plugins.

The security page lists GitHub's private vulnerability reporting form for
each public first-party package. Bifrost, the website and private
first-party plugins go to support@nativephp.com. Third-party plugins go to
the author's support contact from the plugin directory.

Both pages are linked from the footer.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@simonhamp
simonhamp merged commit c2ffd8e into main Oct 29, 2026
3 checks passed
@simonhamp
simonhamp deleted the contributing-security-pages branch October 29, 2026 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant