Home

Table of contents

• Table of contents
• 1. Cheat-sheets
  • 1.1. Automation cheat-sheets
  • 1.2. UX cheat-sheets
• 2. Configuration
• 3. InnerSource resources
• 4. Metrics and analytics
• 5. Security
  • 5.1. Data leak prevention
    • 5.1.1. Manual removal
    • 5.2.1. Automated removal
• 6. Best practices by programming language
  • 6.1. Node.js
  • 6.2. Python

1. Cheat-sheets

Quick reference guides for stuff you don't want to memorize.

1.1. Automation cheat-sheets

Let automation communicate for you!

Automated issue and pull request generation .

1.2. UX cheat-sheets

Improve developer experience with icons, images, and media.

• ADR status labels
• Badges cheatsheet
• Octicon cheatsheet
  
  • CDN   
  • SVG grid
• Project status badges
• TechRadar labels

2. Configuration

• The Twelve-Factor App: Config

  Store config in the environment

  Wiggins, A. (2018). The Twelve-Factor App . 12factor.net. Retrieved 8 March 2018, from https://12factor.net/config

• motdotla/dotenv

  Loads environment variables from .env for nodejs projects.

3. InnerSource resources

Learning materials and resources to support your software product and grow your community, from handbooks to how-to guides.

Visit Mozilla Science Lab's "'Working Open' Project Guide" page for structured exercises to help you create build docs and tools that support:

• Why Open?
  • Working Open Basics
  • Open at Mozilla
• Project Setup
  • Lowering Barriers
  • Roadmapping
  • Legal
  • Project Checklist
• Working with Contributors
  • Mechanics of Contributing
  • Engaging Contributors
  • Developing Leaders
• Getting Unstuck
  • Where to Get Help
  • Toxic Members
• Maintaining Momentum
  • Events
  • Project Management
• Further Reading
• Edit this Book

4. Metrics and analytics

Measure individual, team, project, and organizational performance.

• CoderStats: View statistics for millions of GitHub users.
• GitLance: GitLance analyzes the code graph to quantify your programming abilities in a customizable profile.

5. Security

5.1. Data leak prevention

Data loss prevention software detects potential data breaches/data ex-filtration transmissions and prevents them by monitoring, detecting and blocking sensitive data while in-use (endpoint actions), in-motion (network traffic), and at-rest (data storage).

Data loss prevention software. (2018). En.wikipedia.org. Retrieved 8 March 2018, from https://en.wikipedia.org/wiki/Data_loss_prevention_software

5.1.1. Manual removal

• "Removing sensitive data from a repository".

  If you commit sensitive data, such as a password or SSH key into a Git repository, you can remove it from the history. To entirely remove unwanted files from a repository's history you can use either the `git filter-branch` command or the [BFG Repo-Cleaner](http://rtyley.github.io/bfg-repo-cleaner/).

• "Removing files from a repository's history."

  Warning: These procedures will permanently remove files from the repository on your computer and

5.2.1. Automated removal

• dxa4481/truffleHog

  Searches through git repositories for high entropy strings and secrets, digging deep into commit history

6. Best practices by programming language

Boilerplates, examples, and project scaffolding tools to start your product development and delivery like a l33t hax0r.

6.1. Node.js

• Node.js best practices

6.2. Python

1. kennethreitz/python-guide

   Python best practices guidebook, written for Humans.

   

2. heroku/heroku-django-template

   A Django 2.0 base template featuring all recommended best practices for deployment on Heroku and local development.

   

3. seanfisk/python-project-template

   A template Python project with a focus on best practices.

   

4. generator-python-lib

   generator-python-lib scaffolds a basic Python 3 library, including build and test support, and example source files, using your responses to a series of command line prompts.

   Features:

   • Bootstrap Python 3 compatible library.
   • Bootstrap support for writing tests using Python's built-in unittest framework.
   • Bootstrap Tox configuration file tox.ini to support executing tests against multiple Python interpretors.
   • Bootstrap Pylint configuration file .pylintrc for checking code quality.
   • Bootstrap Git configuration files, .gitattributes and .gitignore .
   • Bootstrap CONTRIBUTING.md file.
   • Bootstrap README.md file.
   • Bootstrap Coverage.py for code coverage support.