Thanks for your interest in helping. cra-scope is the open-source core
of the CRA Scope ecosystem. We accept issues
and pull requests under the project's Apache-2.0 licence.
- Be specific. Bug reports without a reproducible example will be closed. Feature requests without a CRA-text or ENISA-source reference will be triaged but rarely merged.
- No legal advice in code or docs. We document what the regulation says; we do not interpret it for end-users.
- One logical change per PR. Keep diffs reviewable.
git clone https://github.com/Usingthefork/cra-scope-cli.git
cd cra-scope-cli
python -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"
pytestAll tests must pass on Python 3.10, 3.11 and 3.12 (the CI matrix).
- Branch from
main. - Conventional commits style (
feat:,fix:,docs:,chore:, etc.). - Add or update tests for any behaviour change.
- Update
CHANGELOG.mdunder## [Unreleased]. - Do not bump the version in
pyproject.toml— maintainers handle releases.
- Move
[Unreleased]entries under a new version heading inCHANGELOG.md. - Bump
versioninpyproject.toml. - Commit, then tag:
git tag vX.Y.Z && git push origin main --tags. - The
release.ymlworkflow builds + publishes to PyPI via OIDC. - Create a GitHub Release from the tag with the changelog body.
Do not open a public issue. See SECURITY.md.