Holger Frohloff

Add OSSF Scorecard security workflow

1

I tested this project using [OSSF Scorecard](https://securityscorecards.dev/) by the [Open Source Security Foundation](https://openssf.org/). Their aim is: > We created Scorecard to help open source maintainers improve their security best practices...

Add OSSF Scorecard security workflow

4

I tested this project using [OSSF Scorecard](https://securityscorecards.dev/) by the [Open Source Security Foundation](https://openssf.org/). Their aim is: > We created Scorecard to help open source maintainers improve their security best practices...

Test Rails 5 beta with Golden Cobra

1

Steps to get Rails 5 (edge): `git clone [email protected]:/rails/rails.git` `cd rails` `bundle install` `./railties/exe/rails new --edge my_edge_app` `cd my_edge_app` `bundle install` As of October 30th it does not work with...

Update react-js version

7

We still use 0.13.1 in this project. This should be updated. The current version is v15.4.2

Provide an `of_articletype_or` scope for Goldencobra::Article

2

There is this scope: https://github.com/ikuseiGmbH/Goldencobra/blob/master/app/models/goldencobra/article.rb#L126 ``` ruby scope :articletype, lambda{ |name| where(article_type: name)} ``` We need a second scope, that uses `OR` for scoping.

Refactoring `Goldencobra::Widget`

1

According to Code Climate: https://codeclimate.com/github/ikusei/Goldencobra/Goldencobra::Widget

DEPRECATION WARNING: [Devise] `sign_in(:user, resource)` on controller tests is deprecated and will be removed from Devise. Please use `sign_in(resource, scope: :user)` instead. (called from block (4 levels) in at `/test/dummy/spec/controllers/articles_controller_spec.rb:55)`

`paper_trail` is used in version 4.1.0 The current version is 5.0.0. There might be breaking changes. There are deprecation warnings, e.g.: ``` DEPRECATION WARNING: PaperTrail.track_associations has not been set. As...

Reduce dependencies

3

Right now we require 54 runtime dependencies for Goldencobra. I am positive that this could be reduced by a lot. ``` ruby s.add_dependency 'rails', '~> 4.2.5' s.add_dependency 'jquery-rails' s.add_dependency 'devise'...

Install-Generator doesn't work.

5

- its outdated - the steps should accept `return` as a `yes` - it messes up your Gemfile if you don't use Goldencobra as an engine but solo