verify answers one question: can this repository work right now?
It is stricter than audit.
auditchecks whether a repo matches the standard.verifychecks whether the repo is runnable and releasable enough for day-to-day development.
oss-bootstrap verify --target <path> [--json]verify runs in three phases:
- Load repo metadata
- Validate required structure
- Execute core scripts
These checks must pass for verify to return PASS:
package.jsonexists and is valid JSONREADME.mdexistsLICENSEexistsAGENTS.mdexiststsconfig.jsonexists.github/workflows/ci.ymlexists- required scripts exist in
package.jsonbuildlinttesttypecheck
These do not fail verify by themselves, but they should be reported:
- missing
repository - missing
exports - missing
files - missing
packageManager
If required scripts are present, verify attempts to run:
linttestbuildtypecheck
The package manager is detected in this order:
package.json.packageManager- lockfile (
pnpm-lock.yaml,package-lock.json,yarn.lock) - fallback to
pnpm
If any script exits non-zero, verify returns FAIL.
Human-readable output must include:
- final status:
PASSorFAIL - target path
- failed checks
- warnings
- executed commands
JSON output must include:
statustargetpackageManagerfailureswarningscommands
- exit
0:PASS - exit
1:FAIL
- auto-install dependencies
- auto-fix missing scripts
- starter-specific deep semantic checks