PurpleDoubleD / locally-uncensored

Copies a prompt for a coding agent. It has 5 tasks for the maintainers of PurpleDoubleD/locally-uncensored.

Improve the Health Facts of the GitHub repository PurpleDoubleD/locally-uncensored.

AwesomeRepos measures facts about how a repository is maintained, released, secured, and documented. Its page for this repository is https://awesomerepos.com/PurpleDoubleD/locally-uncensored. A change to the repository can improve each of the 5 items below. Each item gives the measured fact or score, and a task.

The Scorecard result is from 2026-11-05: https://scorecard.dev/viewer/?uri=github.com/PurpleDoubleD/locally-uncensored

1. OpenSSF Scorecard Binary-Artifacts: 9 of 10
   Scorecard says: binaries present in source code
   Task: Find the binary files that Scorecard reports (.jar, .exe, .dll, .so, .pyc, and similar). For each file, find what it does and how the build makes it. Do not remove a file that a fresh clone needs, for example gradle-wrapper.jar. Remove only the files that the build makes again, and tell me about each file that you keep.

2. OpenSSF Scorecard Dependency-Update-Tool: 0 of 10
   Scorecard says: no update tool detected
   Task: Add .github/dependabot.yml (or a Renovate configuration) for each package ecosystem in the repository and for github-actions.

3. OpenSSF Scorecard Pinned-Dependencies: 8 of 10
   Scorecard says: dependency not pinned by hash detected -- score normalized to 8
   Task: Pin each GitHub Action in .github/workflows to a full commit SHA, with the version in a comment. Pin container base images by digest. In CI, install from the lockfile with the frozen install command.

4. OpenSSF Scorecard SAST: 8 of 10
   Scorecard says: SAST tool detected but not run on all commits
   Task: Add a workflow that runs static analysis on each pull request, for example GitHub CodeQL for the languages of this repository.

5. OpenSSF Scorecard Token-Permissions: 0 of 10
   Scorecard says: detected GitHub workflow tokens with excessive permissions
   Task: In each workflow in .github/workflows, set permissions: contents: read at the top level. Give a job more permissions only where it needs them.

Rules for this work:
- Each file must be true for this project. Do not copy text that does not apply to it.
- Do not choose a licence, a contact, or a release version for me. Ask me.
- Do not publish a release, change a repository setting, or push to the default branch. Make the changes on a new branch.
- Keep each change small, and run the checks of this repository before you finish.
- At the end, list each item as DONE, SKIPPED (with the reason), or NEEDS A DECISION (with the question).

AwesomeRepos reads these facts again in its next scan. The definitions of the checks: https://awesomerepos.com/health-facts