fundamentum-cli 0.1.3 → 0.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -1
- package/install.js +6 -0
- package/package.json +6 -6
package/README.md
CHANGED
|
@@ -57,7 +57,7 @@ That's it. A repo that went from bare-bones to release-ready in under a minute.
|
|
|
57
57
|
|
|
58
58
|
- **Community health files** — `CONTRIBUTING.md`, `CODEOWNERS`, `CODE_OF_CONDUCT.md`, `SECURITY.md`, issue + PR templates, `dependabot.yml`
|
|
59
59
|
- **Branch protection** — modern rulesets on `main` (PR-only pushes, CODEOWNERS review, required checks, no force-push)
|
|
60
|
-
- **Security** — secret scanning + push protection
|
|
60
|
+
- **Security** — Dependabot alerts everywhere; secret scanning + push protection on public repos, opt-in on private/internal repos via `--advanced-security`; CodeQL for public repos
|
|
61
61
|
- **Starter workflows** — CI, coverage, and CodeQL pipelines that work out of the box
|
|
62
62
|
- **Idempotent by design** — re-running is always safe
|
|
63
63
|
|
|
@@ -82,6 +82,7 @@ Built for solo devs and small teams who want their repos to feel like they were
|
|
|
82
82
|
| `--dry-run` | Preview the full plan without applying |
|
|
83
83
|
| `--pr` | Batch file changes into a pull request |
|
|
84
84
|
| `--no-overwrite` | Only add missing files, never touch existing ones |
|
|
85
|
+
| `--advanced-security` | Enable GHAS (secret scanning, push protection) on private/internal repos (paid) |
|
|
85
86
|
|
|
86
87
|
## Prerequisites
|
|
87
88
|
|
package/install.js
CHANGED
|
@@ -41,6 +41,12 @@ function getPackageVersion(pkg) {
|
|
|
41
41
|
}
|
|
42
42
|
|
|
43
43
|
function getArchiveName(version, platform, arch) {
|
|
44
|
+
// GoReleaser ignores windows/arm64; fail closed instead of a 404 download.
|
|
45
|
+
if (platform === "win32" && arch === "arm64") {
|
|
46
|
+
throw new Error(
|
|
47
|
+
`Unsupported platform: ${platform}/${arch}. Windows ARM64 binaries are not published; use Windows x64 or build from source.`
|
|
48
|
+
);
|
|
49
|
+
}
|
|
44
50
|
const os = PLATFORM_MAP[platform];
|
|
45
51
|
const cpu = ARCH_MAP[arch];
|
|
46
52
|
if (!os || !cpu) {
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "fundamentum-cli",
|
|
3
|
-
"version": "0.1.
|
|
3
|
+
"version": "0.1.5",
|
|
4
4
|
"description": "Bootstrap and harden GitHub repos for OSS collaboration — community files, branch protection, security features, and starter workflows in one command.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
@@ -57,10 +57,10 @@
|
|
|
57
57
|
"bin/"
|
|
58
58
|
],
|
|
59
59
|
"binaryChecksums": {
|
|
60
|
-
"fundamentum_0.1.
|
|
61
|
-
"fundamentum_0.1.
|
|
62
|
-
"fundamentum_0.1.
|
|
63
|
-
"fundamentum_0.1.
|
|
64
|
-
"fundamentum_0.1.
|
|
60
|
+
"fundamentum_0.1.5_darwin_amd64.tar.gz": "92f051cb4eaba47cd09b31a0011fc682f272488323c10e36ddaca5121fac24ea",
|
|
61
|
+
"fundamentum_0.1.5_darwin_arm64.tar.gz": "c6d69c3c30195e74e834471c2eed8121fbd4b59a2f502e5831abc1933dd34e9f",
|
|
62
|
+
"fundamentum_0.1.5_linux_amd64.tar.gz": "375d2578f4f9ef0c836bb86295dbc6976b27ff0608c3bd0ebdce5665e540dcf0",
|
|
63
|
+
"fundamentum_0.1.5_linux_arm64.tar.gz": "404b56dc51a8209086b93f92d345026adf452f0460c67a1e701fcf3d728488e8",
|
|
64
|
+
"fundamentum_0.1.5_windows_amd64.zip": "cd78b7916a5f7f2b1c48b922585d562b0bd593326802514f244221dced5168ad"
|
|
65
65
|
}
|
|
66
66
|
}
|