Contributing

On this page

Contributions are welcome: a bug report, a fix, a translation, a review of someone else’s pull request. The repository’s CONTRIBUTING.md is the authority and this page follows it.

For anything larger than a small fix, open an issue and discuss it before you write code.

What is wanted most

The team is particularly interested in:

Contributions are handled in three groups.

Kind How it is treated
Security and privacy improvements Highest priority. Reviewed and merged quickly when they verifiably improve security or privacy.
Bug fixes and core improvements Reviewed on impact and fit with the project’s goals.
New features Must fit the roadmap, and should include documentation and tests.

Before you open a pull request

  1. Set the project up. The commands are under “Run it locally” on the self-hosting page. The local development guide goes further.
  2. Follow the existing code style, add tests for new features and update the documentation your change touches.
  3. Run the checks that CI runs.
cd dembrane/platform
bun run check        # lint, types, the layer rule, tests
cd dembrane/frontend
pnpm lint
pnpm exec tsc
pnpm exec vitest run

The backend is Bun and TypeScript. The frontend uses pnpm.

The contributor agreement

Your first pull request needs the “Dembrane B.V. Individual Contributor License Agreement” (CLA.md).

To sign, add your GitHub username as a new line in contributors.yml, in the same pull request. A check on every pull request to main comments when the author is missing from that file.

CONTRIBUTING.md also says: “By contributing, you agree that your contributions will be licensed under our license.” See licensing.

Review

  1. Initial review by maintainers.
  2. Feedback and discussion.
  3. Revisions if needed.
  4. Final review and merge.

Translations

You can translate the dashboard and the participant portal without being a developer. TRANSLATING.md in the repository is the guide.

Security issues

Email [email protected] to disclose a security vulnerability. The team investigates all legitimate reports.

Conduct and help

Related pages

Comments