Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Add benign and malicious corpus with false-positive and redaction policy

Open
#29 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
42/100
Issue type
Feature
Clarity
Mostly clear
Activity status
Active
Tech stack
javascript
Domain
security, testing

Research direction

Start by reviewing dependency #28 and the roadmap item B06-02, then agree on the corpus composition and redaction and confidence policy at the decision gate. Build benign and malicious fixtures with expected outcomes, and record true positives, false positives, and misses per rule. Done means false-positive rates are recorded and reports redact secret-like values while retaining paths and confidence.

Written by the indexing model from the issue text.

Description

status:approved type:chore

Goal

Add a benign and malicious corpus and data fixtures that measure false positives and enforce secret redaction with a paths and confidence policy.

Observations

  • Detection quality needs measurement, not assertion.
  • Findings may reference sensitive content and must be redacted.
  • Paths and confidence need a documented policy.

Decision gate

Approve corpus composition and the redaction and confidence policy before wiring assertions.

Acceptance criteria

  • Benign and malicious corpora exist with expected outcomes.
  • False-positive rate is measured and recorded per rule.
  • Redaction hides secret-like content while keeping paths and confidence.

Verification

  • Corpus run -> recorded true positives, false positives, and misses per rule.
  • Redaction check -> secret-like values absent from reports, paths retained.

Release checkpoint

Remaining risk: a corpus is a sample, not proof of completeness. No unconditional LLM verdicts.

Tracking

Roadmap item: B06-02. All acceptance criteria remain pending; publication does not grant approval or release authority.

Dependencies

  • Depends on #28 (B06-01).
Dominant language
JavaScript
Stars
22
Forks
3
Avg merge
27m
Merged PRs (30d)
27

Getting set up

This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from egdev6/github-repository-bootstrap

All issues in egdev6/github-repository-bootstrap

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.