The normative specification of the projectfile: a single stack- and vendor-agnostic YAML file that describes a software project identity, build, CI and publishing. Holds the spec prose and v1 JSON Schema, dual-licensed MIT and CC-BY-4.0, rendered at projectfile.org and consumed by the pf-cli, pf-bridge and pf-ci tools.
- Makefile 100%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
|
All checks were successful
published / release-tag (push) Successful in 2s
published / runner-is-ready (push) Successful in 3s
published / projectfile-is-valid (push) Successful in 9s
published / source-is-compliant (push) Successful in 4s
published / source-is-secure (push) Successful in 12s
published / source-passes-lint (push) Successful in 58s
published / projectfile-is-ok (push) Successful in 12s
published / published (push) Successful in 0s
core: 13.3.0 #m6e #auto |
||
| .forgejo/workflows | ||
| .github/workflows | ||
| .makefile | ||
| docs | ||
| LICENSES | ||
| spec | ||
| .claudeignore | ||
| .containerignore | ||
| .dockerignore | ||
| .gitattributes | ||
| .gitignore | ||
| .gitmodules | ||
| .yamllint | ||
| AGENTS.md | ||
| AI_POLICY.md | ||
| CITATION.cff | ||
| CLAUDE.md | ||
| CODE_OF_CONDUCT.md | ||
| CODEOWNERS | ||
| CONTRIBUTING.md | ||
| lefthook.yaml | ||
| LICENSE | ||
| LICENSE-CC-BY-4.0 | ||
| LICENSE-MIT | ||
| Makefile | ||
| projectfile.yaml | ||
| README.md | ||
| SECURITY.md | ||
| SUPPORT.md | ||
The Projectfile Specification
The normative specification of the projectfile: a single stack- and vendor-agnostic YAML file that describes a software project identity, build, CI and publishing. Holds the spec prose and v1 JSON Schema, dual-licensed MIT and CC-BY-4.0, rendered at projectfile.org and consumed by the pf-cli, pf-bridge and pf-ci tools.
Building
Clone the repository with its submodules:
git clone --recurse-submodules https://codeberg.org/projectfile/specification specification && cd specification
Run make with no arguments for the default target; run make help to list every target.
Pipeline entry points:
make analyzed— Run the heavy analysis sweep (mutation testing, benchmarks)make audited— Re-scan the pinned dependencies and published artifacts for new vulnerabilitiesmake check-outdated— Report every pinned dependency that lags upstreammake release-is-ready— Run the pseudo-CI pipeline locally — build, test and scan, without publishing
Policies
Links
License
This project is licensed under MIT OR CC-BY-4.0 — see the LICENSE file for details.