|
| 1 | +# Contributing |
| 2 | + |
| 3 | +## Reporting Issues |
| 4 | + |
| 5 | +Found a bug or have a feature request? Open an issue on the relevant repository: |
| 6 | + |
| 7 | +| Package | Issues | |
| 8 | +|---------|--------| |
| 9 | +| eqsl-mcp | [github.com/qso-graph/eqsl-mcp/issues](https://github.com/qso-graph/eqsl-mcp/issues) | |
| 10 | +| qrz-mcp | [github.com/qso-graph/qrz-mcp/issues](https://github.com/qso-graph/qrz-mcp/issues) | |
| 11 | +| clublog-mcp | [github.com/qso-graph/clublog-mcp/issues](https://github.com/qso-graph/clublog-mcp/issues) | |
| 12 | +| lotw-mcp | [github.com/qso-graph/lotw-mcp/issues](https://github.com/qso-graph/lotw-mcp/issues) | |
| 13 | +| hamqth-mcp | [github.com/qso-graph/hamqth-mcp/issues](https://github.com/qso-graph/hamqth-mcp/issues) | |
| 14 | +| pota-mcp | [github.com/qso-graph/pota-mcp/issues](https://github.com/qso-graph/pota-mcp/issues) | |
| 15 | +| sota-mcp | [github.com/qso-graph/sota-mcp/issues](https://github.com/qso-graph/sota-mcp/issues) | |
| 16 | +| solar-mcp | [github.com/qso-graph/solar-mcp/issues](https://github.com/qso-graph/solar-mcp/issues) | |
| 17 | +| wspr-mcp | [github.com/qso-graph/wspr-mcp/issues](https://github.com/qso-graph/wspr-mcp/issues) | |
| 18 | +| This documentation site | [github.com/qso-graph/qso-graph.github.io/issues](https://github.com/qso-graph/qso-graph.github.io/issues) | |
| 19 | + |
| 20 | +--- |
| 21 | + |
| 22 | +## Pull Requests |
| 23 | + |
| 24 | +1. Fork the repository |
| 25 | +2. Create a feature branch from `main` |
| 26 | +3. Make your changes |
| 27 | +4. Ensure all tests pass (`pytest`) |
| 28 | +5. Submit a pull request |
| 29 | + |
| 30 | +### Code Style |
| 31 | + |
| 32 | +- Python 3.10+ type hints |
| 33 | +- No `subprocess`, `os.system`, or `shell=True` (see [Security](../security.md)) |
| 34 | +- All external URLs must be HTTPS |
| 35 | +- Error messages must not include user input values |
| 36 | +- Rate limiting on all external API calls |
| 37 | + |
| 38 | +--- |
| 39 | + |
| 40 | +## Security Vulnerabilities |
| 41 | + |
| 42 | +**Do NOT open public GitHub issues for security vulnerabilities.** |
| 43 | + |
| 44 | +Report security issues privately: |
| 45 | + |
| 46 | +- **Email**: [ki7mt@yahoo.com](mailto:ki7mt@yahoo.com) |
| 47 | +- **Subject**: `[SECURITY] qso-graph vulnerability report` |
| 48 | + |
| 49 | +Include: |
| 50 | +- Affected package and version |
| 51 | +- Steps to reproduce |
| 52 | +- Potential impact |
| 53 | + |
| 54 | +We will acknowledge receipt within 24 hours and provide a fix timeline. |
| 55 | + |
| 56 | +--- |
| 57 | + |
| 58 | +## Development Setup |
| 59 | + |
| 60 | +```bash |
| 61 | +# Clone any package |
| 62 | +git clone https://github.com/qso-graph/eqsl-mcp.git |
| 63 | +cd eqsl-mcp |
| 64 | + |
| 65 | +# Create a development venv |
| 66 | +python3 -m venv .venv |
| 67 | +source .venv/bin/activate |
| 68 | + |
| 69 | +# Install in editable mode with dev dependencies |
| 70 | +pip install -e ".[dev]" |
| 71 | + |
| 72 | +# Run tests |
| 73 | +pytest |
| 74 | + |
| 75 | +# Run in mock mode |
| 76 | +EQSL_MCP_MOCK=1 eqsl-mcp |
| 77 | + |
| 78 | +# Test with MCP Inspector |
| 79 | +eqsl-mcp --transport streamable-http --port 8001 |
| 80 | +``` |
0 commit comments