Add CI workflow, CHANGELOG, community health files, standardize copyright

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: roli-lpci

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/ci.yml

@@ -0,0 +1,21 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18, 20, 22]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: npm install
+      - run: npm test

CHANGELOG.md

@@ -0,0 +1,13 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+## [0.2.0] - 2026-02-25
+
+### Added
+- Four quality gates: lint (ESLint), typecheck (tsc), build, and Lighthouse
+- Bounded auto-repair loop with optional LLM-assisted patches via Ollama
+- Machine-readable escalation evidence (`.quick-gate/evidence.json`)
+- Changed-files mode for fast PR feedback
+- Canary and enforce modes
+- Broadened from Next.js-only to all TypeScript/ESLint projects

CODE_OF_CONDUCT.md

@@ -0,0 +1,45 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, caste, color, religion, or sexual
+identity and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment:
+
+- Using welcoming and inclusive language
+- Being respectful of differing viewpoints and experiences
+- Gracefully accepting constructive criticism
+- Focusing on what is best for the community
+- Showing empathy towards other community members
+
+Examples of unacceptable behavior:
+
+- The use of sexualized language or imagery, and sexual attention or advances of any kind
+- Trolling, insulting or derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information without explicit permission
+- Other conduct which could reasonably be considered inappropriate in a professional setting
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the project maintainers at **lpcisystems@gmail.com**. All complaints
+will be reviewed and investigated promptly and fairly.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org),
+version 2.1, available at
+https://www.contributor-covenant.org/version/2/1/code_of_conduct.html.
+
+For the full text and FAQ, see https://www.contributor-covenant.org.

CONTRIBUTING.md

@@ -0,0 +1,49 @@
+# Contributing to Quick Gate
+
+Thank you for your interest in contributing to Quick Gate. This document provides
+guidelines and information for contributors.
+
+## Reporting Bugs
+
+Please report bugs by opening an issue at:
+https://github.com/roli-lpci/quick-gate-js/issues
+
+Include the following in your bug report:
+- Quick Gate version (`quick-gate --version`)
+- Node.js version (`node --version`)
+- Operating system
+- Steps to reproduce
+- Expected vs actual behavior
+
+## Submitting Pull Requests
+
+1. Fork the repository and create your branch from `main`.
+2. Install dependencies: `npm install`
+3. Make your changes and add tests if applicable.
+4. Run the test suite: `npm test`
+5. Ensure your code follows the existing style.
+6. Write a clear PR description explaining **what** changed and **why**.
+
+### PR Guidelines
+
+- Keep PRs focused on a single change.
+- Update documentation if your change affects user-facing behavior.
+- Add a changelog entry under `## [Unreleased]` in `CHANGELOG.md`.
+
+## Development Setup
+
+```bash
+git clone https://github.com/roli-lpci/quick-gate-js.git
+cd quick-gate-js
+npm install
+npm test
+```
+
+## Questions?
+
+Open a discussion or issue on GitHub. We are happy to help.
+
+## License
+
+By contributing, you agree that your contributions will be licensed under the
+Apache License 2.0.

LICENSE

@@ -175,7 +175,7 @@
 
    END OF TERMS AND CONDITIONS
 
-   Copyright 2026 Hermes Labs (LPCI)
+   Copyright 2026 LPCI Innovations
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

SECURITY.md

@@ -0,0 +1,24 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in Quick Gate, please report it
+responsibly by emailing:
+
+**lpcisystems@gmail.com**
+
+Please do **not** open a public GitHub issue for security vulnerabilities.
+
+## What to Include
+
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+
+## Response Timeline
+
+- **Acknowledgment**: within 48 hours
+- **Initial assessment**: within 5 business days
+- **Fix or mitigation**: as soon as reasonably possible
+
+We appreciate your help in keeping Quick Gate and its users safe.

package.json

@@ -17,7 +17,7 @@
     "node": ">=18.0.0"
   },
   "license": "Apache-2.0",
-  "author": "Hermes Labs <lpcisystems@gmail.com> (https://lpci.ai)",
+  "author": "Hermes Labs <lpcisystems@gmail.com> (https://hermes-labs.ai)",
   "homepage": "https://lpci.ai",
   "repository": {
     "type": "git",