Jean-Pierre MartineauandClaude Opus 5
628b665420
The rest of the community files, which are the half of open-sourcing that is not code: how someone tells you about a hole, what happens if a thread turns nasty, and what you will be asked when they file a bug. SECURITY.md points at GitHub's private vulnerability reporting rather than an address that will be scraped, and promises only what one person in his spare time can keep — an acknowledgement inside a week, which is not a fix inside a week, and a decision inside ninety days. Its scope section is the MeshTerm-specific part: a channel key or an admin password reaching a log, an export or the screen is a vulnerability here, a crafted packet corrupting the observation database is one, and a hole in the MeshCore firmware or in `bleak` is somebody else's to fix. It also says plainly that the database is not encrypted, because a backup of it carries a mesh's whole history. The code of conduct is Contributor Covenant 2.1, taken verbatim from source rather than paraphrased, with a real address in the enforcement section. The bug form asks the seven things that otherwise get asked in every thread: version, flavour, transport, OS and Python, terminal and its size, companion firmware. Flavour is there because the PicoCalc draws itself in 53 columns and sixteen colours, so a layout bug in one flavour frequently does not exist in the other. It asks for the version from the splash screen rather than from `meshterm --version`, which does not exist yet. Dependabot is weekly and capped low, with minor and patch grouped into one pull request: a solo maintainer facing five dependency PRs every Monday stops reading any of them. Funding points at the three destinations the app's own support page already offers, so the two cannot drift. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
7 lines
292 B
YAML
7 lines
292 B
YAML
# Kept in step with meshterm/assets/pages/support.md deliberately. If the app offers a
|
|
# way to chip in and this file doesn't, the two have drifted and one of them is lying.
|
|
buy_me_a_coffee: johnputer
|
|
custom:
|
|
- "https://www.patreon.com/c/MeshTerm"
|
|
- "https://tinyurl.com/SupportMeshTerm"
|