Conversation
## Summary Removes the "for free" sales tagline and the "vs. Wappalyzer" comparison table (including a pricing row, naming a commercial competitor) flagged by GitHub as advertising-style content. Keeps the technical feature list and privacy section. ## Test plan - Manual read-through; no code changes Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
Two gaps in this repository. **License.** The org standardised on MIT: `LICENSE`, the README mention and the `package.json` `license` field all move off Apache-2.0. The `apache` strings under `internal/lib/rules/servers` are the **web server** detection rules, not the license — untouched. **Dependabot.** There was no `dependabot.yml` at all, so nothing has ever told me about a dependency update here. Added `bun` (the extension itself) and `github-actions`, daily, targeting `develop`, labelled with the org taxonomy. An extension ships its dependencies straight to the user's browser, so an advisory lands on every install rather than on a server I control. Note for later, not fixed here: this repository still pins the org reusables at `v1.10.1`'s predecessor `v1.2.0` — sixteen releases back. Now that Dependabot can see the repository, it will propose that itself. Signed-off-by: Jaro-c <75870284+Jaro-c@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bringing develop to main so the license and the Dependabot config are the ones on the default branch. No tag, no release — this is a branch sync.
Why it matters beyond tidiness: Dependabot reads its config from the default branch, and its registration only comes back when that file changes there. As long as main carries the old copy, this repository keeps getting no update pull requests at all.
What rides along: