From 1ed23cb04969e299e0ef92b50272e091623325d0 Mon Sep 17 00:00:00 2001
From: thestreamcode <dev@mikesoft.it>
Date: Sun, 21 Jun 2026 20:16:50 +0200
Subject: [PATCH] chore: standardize community-health files and harden CI

---
 .github/dependabot.yml   | 11 +++++++++++
 .github/workflows/ci.yml |  3 +++
 CITATION.cff             |  8 ++++++++
 CODE_OF_CONDUCT.md       | 27 +++++++++++++++++++++++++++
 4 files changed, 49 insertions(+)
 create mode 100644 .github/dependabot.yml
 create mode 100644 CITATION.cff
 create mode 100644 CODE_OF_CONDUCT.md

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..be719fa
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bc054b9..f9bae10 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [ main, master ]
 
+permissions:
+  contents: read
+
 jobs:
   validate:
     name: Validate
diff --git a/CITATION.cff b/CITATION.cff
new file mode 100644
index 0000000..42de699
--- /dev/null
+++ b/CITATION.cff
@@ -0,0 +1,8 @@
+cff-version: 1.2.0
+message: "If you use this software, please cite it as below."
+title: "Keysoft"
+authors:
+  - family-names: Gasperini
+    given-names: Michael
+url: "https://github.com/TheStreamCode/keysoft"
+version: "2.2"
diff --git a/CODE_OF_CONDUCT.md b/CODE_OF_CONDUCT.md
new file mode 100644
index 0000000..a3a2d23
--- /dev/null
+++ b/CODE_OF_CONDUCT.md
@@ -0,0 +1,27 @@
+# Code of Conduct
+
+## Our Standard
+
+Contributors are expected to be respectful, direct, and constructive.
+
+Examples of positive behavior:
+
+- giving actionable technical feedback
+- assuming good intent
+- discussing code and behavior rather than attacking people
+- sharing context when disagreeing
+
+Examples of unacceptable behavior:
+
+- harassment or abuse
+- personal attacks
+- doxxing or disclosure of private information
+- disruptive or bad-faith participation
+
+## Enforcement
+
+Project maintainers may remove comments, issues, pull requests, or contributors that violate this policy.
+
+## Reporting
+
+Use the maintainer contact listed on `https://mikesoft.it` for private conduct concerns.