遵循以下最佳实践的项目将能够自愿的自我认证,并显示他们已经实现了核心基础设施计划(OpenSSF)徽章。 显示详细资料
[](https://www.bestpractices.dev/projects/7783)
<a href="https://www.bestpractices.dev/projects/7783"><img src="https://www.bestpractices.dev/projects/7783/badge"></a>
MNE: Magnetoencephalography (MEG) and Electroencephalography (EEG) in Python
At least McCloy (BDFL) and Larson (top contributor) satisfy this requirement:
https://mne.tools/dev/development/governance.html#bdfl https://github.com/mne-tools/mne-python/graphs/contributors
Larson (top contributor) is not affiliated with the next 6 top contributors (all of whom have more than 20k lines changed) from:
https://github.com/mne-tools/mne-python/graphs/contributors
Added in https://github.com/mne-tools/mne-python/commit/5897b818e90308d25713fd69552fd29862757dce
The top of each source file contains:
Repository on GitHub, which uses git. git is distributed.
https://github.com/mne-tools/mne-python/issues?q=is%3Aopen+is%3Aissue+label%3AEASY
GitHub requires this.
GitHub 2FA uses Duo.
CIs are required to pass using GitHub branch protections. Code reviewers follow the contributing guideline in reviews (e.g., ensure there are tests):
https://mne.tools/dev/development/contributing.html#mne-python-coding-conventions
Nearly all non-trivial PRs are reviewed and merged by someone other than the author.
Scripting language.
https://mne.tools/stable/install/contributing.html#running-the-test-suite
https://github.com/mne-tools/mne-python/tree/main/.github/workflows https://github.com/mne-tools/mne-python/blob/main/azure-pipelines.yml https://github.com/mne-tools/mne-python/blob/main/.circleci/config.yml
90% on Codecov
https://app.codecov.io/gh/mne-tools/mne-python
GitHub hasn't fixed this for years:
https://github.com/orgs/community/discussions/4444
We could maybe remove the pages and recreate them, but it seems risky. // X-Content-Type-Options was not set to "nosniff".
We considered these issues in 2023 when bandit was added.
No HTTP header use or compilation.
Happens on every commit (including those tagged as release): "an automated test suite with at least 80% branch coverage" pytest + pytest-cov:
There are assert statements in the code that can be skipped by python -O. There are also many input and output validation in the production code. See for example tests that use with pytest.raises(...).
python -O
with pytest.raises(...)
后退