Repository navigation
docs: mark the repo pre-release; add SECURITY.md and root LICENSE - #243
Merged
Merged
Conversation
- README: pre-release warning banner pointing vulnerability reports to SECURITY.md; the module table no longer claims "Production" and now lists openespi-handoff and the real per-module status (#232, #89, deferred writes). The deployment section describes the current Spring Boot JARs, actuator health and build-image (no WAR, no Helm charts exist), and the documentation links point at files that exist. - SECURITY.md: private reporting through GitHub security advisories, what to expect, scope. - LICENSE: the Apache-2.0 text already shipped in each module, at the root, so GitHub detects the licence (it reported none) and README's ./LICENSE link resolves. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
The repo stays public while it is pre-release; this makes that status explicit and gives reporters a private channel.
SECURITY.md.openespi-handoffand shows the real per-module status (AS: unauthenticated /oauth2/authorize redirects to /authorize/delegate without parameters (400); outbound delegation to DC is broken #232, Implement comprehensive JAXB unmarshalling support for XML import #89, deferred writes), linking epic Remediation: ESPI REST controller modernization (post-#116) #119./actuator/healthprobes,spring-boot:build-image, and the AS Dockerfile. It previously described WAR packaging, Spring Boot 3.5 and Helm charts, none of which exist.docs/,MIGRATION_STATUS.mddo not).openespi-handoff.null, and the README's./LICENSElink was broken.Test plan
LICENSEis byte-identical toopenespi-*/LICENSE(same MD5)Production,3.5,helm,MIGRATION_STATUSordocs/links🤖 Generated with Claude Code