CLAUDE.md examples from real projects

mauriceboeReads credentialsCLAUDE.md

TREK

mauriceboe/TREK/CLAUDE.md

subsystems (providers, pipes, guards, `@nestjs/schedule`) over hand-rolled equivalents. - **Fail closed, gates stay on.** Security switches default to safe; misconfiguration must refuse, not degrade. Never lower a quality gate

mauriceboeCLAUDE.md

TREK / client

mauriceboe/TREK/client/CLAUDE.md

isEffectivelyOffline()` is the single source of truth — never read `navigator.onLine` in feature code. - **Rendering security**: never interpolate user content into HTML strings (map popups included — build via DOM + `textContent

mauriceboeCLAUDE.md

TREK / plugin-sdk

mauriceboe/TREK/plugin-sdk/CLAUDE.md

plugin's `client/index.html` (the opaque-origin iframe CSP forbids external link/script). Not a security boundary. - **`src/lucide-icon-names.ts`** — generated snapshot; an unknown icon is a validate **warning**, never an error. - **`test/helpers.ts`** — `makePublishable

mauriceboeReads credentialsCLAUDE.md

TREK / server

mauriceboe/TREK/server/CLAUDE.md

child-process runtime (`supervisor/`, `runtime/plugin-host-entry.ts`, `protocol/envelope.ts`) is **intentionally not Nest**; it is the security boundary. `host/rpc-host.ts` registers an RPC method at spawn only if the plugin holds the unlocking permission

mauriceboeReads credentialsCLAUDE.md

NOMAD

mauriceboe/NOMAD/CLAUDE.md

subsystems (providers, pipes, guards, `@nestjs/schedule`) over hand-rolled equivalents. - **Fail closed, gates stay on.** Security switches default to safe; misconfiguration must refuse, not degrade. Never lower a quality gate

mauriceboeCLAUDE.md

NOMAD / client

mauriceboe/NOMAD/client/CLAUDE.md

isEffectivelyOffline()` is the single source of truth — never read `navigator.onLine` in feature code. - **Rendering security**: never interpolate user content into HTML strings (map popups included — build via DOM + `textContent

mauriceboeCLAUDE.md

NOMAD / plugin-sdk

mauriceboe/NOMAD/plugin-sdk/CLAUDE.md

plugin's `client/index.html` (the opaque-origin iframe CSP forbids external link/script). Not a security boundary. - **`src/lucide-icon-names.ts`** — generated snapshot; an unknown icon is a validate **warning**, never an error. - **`test/helpers.ts`** — `makePublishable

mauriceboeReads credentialsCLAUDE.md

NOMAD / server

mauriceboe/NOMAD/server/CLAUDE.md

child-process runtime (`supervisor/`, `runtime/plugin-host-entry.ts`, `protocol/envelope.ts`) is **intentionally not Nest** — it is the security boundary. `host/rpc-host.ts` registers an RPC method at spawn only if the plugin holds the unlocking permission

moonD4rkCLAUDE.md

HackBrowserData

moonD4rk/HackBrowserData/CLAUDE.md

provides guidance to Claude Code (claude.ai/code) when working with code in this repository. ## Security Notice This project is for security research and defensive purposes only. Do not generate code

AndyMik90CLAUDE.md

Aperant

AndyMik90/Aperant/CLAUDE.md

assisted feature planning with strategic roadmap generation - **Ideation** — Discover improvements, performance issues, and security vulnerabilities - **GitHub/GitLab Integration** — Import issues, AI-powered investigation, PR/MR review and creation - **Changelog** — Generate release notes

apacheCLAUDE.md

dolphinscheduler / dolphinscheduler-api

apache/dolphinscheduler/dolphinscheduler-api/CLAUDE.md

task types via `TaskTypeConfiguration` reading `task-type-config.yaml` / `dynamic-task-type-config.yaml`. ## Configuration `src/main/resources`: - `application.yaml` — server port, datasource, registry, security mode, CORS, OpenAPI. - `task-type-config.yaml`, `dynamic-task-type-config.yaml` — the catalog of task types exposed to the UI. - `i18n/messages_

No other project uses it yet

apacheCLAUDE.md

dolphinscheduler / dolphinscheduler-authentication

apache/dolphinscheduler/dolphinscheduler-authentication/CLAUDE.md

helpers. They share no code — they're bundled here because both are about injecting security behavior into the server stack. **This directory is a Maven parent POM.** ## Sub-modules - **`dolphinscheduler

No other project uses it yet

apacheCLAUDE.md

dolphinscheduler / dolphinscheduler-meter

apache/dolphinscheduler/dolphinscheduler-meter/CLAUDE.md

config wiring. ## Related modules - `dolphinscheduler-common` — compile dep. - `dolphinscheduler-actuator-authentication` (in `dolphinscheduler-authentication/`) — secures the actuator endpoints this module exposes. - Every server module includes meter for metrics

No other project uses it yet

apacheReads credentialsCLAUDE.md

dolphinscheduler / dolphinscheduler-ui

apache/dolphinscheduler/dolphinscheduler-ui/CLAUDE.md

theme`, `timezone`, `route`, `ui-setting`, `file`. - `views/` — page components: `home`, `projects`, `datasource`, `monitor`, `resource`, `security`, `login`, `profile`, `password`, `about`, `ui-setting`. - `utils/` — helpers. ## Backend integration - Axios base URL: `/dolphinscheduler

No other project uses it yet

semaphoreuiCLAUDE.md

semaphore

semaphoreui/semaphore/.claude/CLAUDE.md

variables are forbidden. ## High Availability Support All solutions must work in High Availability mode. ## Security Is the #1 Priority All solutions must be secure by design. Do not consider

No other project uses it yet

bitwardenCLAUDE.md

clients

bitwarden/clients/.claude/CLAUDE.md

contributing.bitwarden.com/) - [Web Clients Setup Guide](https://contributing.bitwarden.com/getting-started/clients/) - [Code Style](https://contributing.bitwarden.com/contributing/code-style/) - [Security Whitepaper](https://bitwarden.com/help/bitwarden-security-white-paper/) - [Security Definitions](https://contributing.bitwarden.com/architecture/security/definitions)

567-labsCLAUDE.md

instructor

567-labs/instructor/CLAUDE.md

template - Link to relevant issues - **Update CHANGELOG.md**: Every PR that changes behavior (fix, feat, security, deprecation) must add an entry under the current `[Unreleased]` section in `CHANGELOG.md`. Format: `- **Area**: Description

No other project uses it yet

OpenNHPCLAUDE.md

opennhp

OpenNHP/opennhp/CLAUDE.md

with code in this repository. ## Project Overview OpenNHP is a Go-based Zero Trust security toolkit implementing two core protocols: - **NHP (Network-infrastructure Hiding Protocol)**: Conceals server ports

qazbnm456Reads credentialsCLAUDE.md

awesome-web-security

qazbnm456/awesome-web-security/CLAUDE.md

working in this repository. ## What this repo is A curated knowledge base of web security learning resources. Data lives in `data/categories.yml` and `data/entries/*.yml`; the three language READMEs (`README.md`, `README-zh.md

No other project uses it yet

coleam00Pipes a download into a shellCLAUDE.md

context-engineering-intro / claude-code-full-guide

coleam00/context-engineering-intro/claude-code-full-guide/CLAUDE.md

data = json.loads(line) # Process and yield each item yield process_item(data) ``` ## 🛡️ Security Best Practices ### Security Guidelines - Never commit secrets - use environment variables - Validate all user input with Pydantic