docs(ospo): community health rollout v2 — README, agents.md, health files

[dj4oC]

Summary

This PR is part of the Kiteworks OSPO community health rollout (kiteworks.com/opensource), applied to all ~110 public ownCloud repositories starting May 5, 2026.

• README.md: Rewritten with v2 OSPO template
  • License-specific OSPO section with Apache 2.0 migration guidance
  • Mandatory Community & Support section: GitHub Discussions, Matrix, docs, enterprise support, OSPO home
  • Contributing workflow: Rebase Early/Often, Dependabot, PGP/GPG-signed commits, DCO sign-off, GitHub Actions policy
  • Security section pointing to security.owncloud.com + YesWeHack bug bounty
  • Translations link to Transifex (owncloud project)
• agents.md (new): AI agent context file with architecture, build commands, OSPO policy constraints
• CODE_OF_CONDUCT.md (new): Redirect to https://owncloud.com/contribute/code-of-conduct/
• CONTRIBUTING.md (new): Redirect to https://owncloud.com/contribute/
• SECURITY.md (new): Redirect to https://security.owncloud.com + YesWeHack
• SUPPORT.md (new): Redirect to https://owncloud.com/contact-us/ and support channels

Test plan

• README renders correctly on GitHub (badges, sections, links)
• All health file links resolve (CODE_OF_CONDUCT, CONTRIBUTING, SECURITY, SUPPORT)
• agents.md loads correctly in Claude Code and GitHub Copilot
• License referenced in README matches actual LICENSE file in repo

---

🤖 Generated with Claude Code as part of the ownCloud OSPO rollout.
Kiteworks OSPO: https://kiteworks.com/opensource

[CLAassistant]

All committers have signed the CLA.

[DeepDiver1975]

Code Review

Pure documentation change: rewrites README.md with the OSPO template and adds four redirect-style health files (CODE_OF_CONDUCT.md, CONTRIBUTING.md, SECURITY.md, SUPPORT.md) plus an agents.md AI-context file. No code/build/test impact.

Strengths

• Health files are genuinely useful — GitHub surfaces them in its UI and the repo lacked them.
• README is far more informative than the previous 9-line stub.
• agents.md build/test commands are accurate — verified make build-dev, make dist, make test-php-unit, make test-php-style, make test-js, make install-js-deps all exist in the Makefile. ✅
• License claim is consistent: LICENSE is AGPL-3.0 and appinfo/info.xml declares <licence>AGPL</licence>. ✅

Issues & Risks

1. PHP version mismatch (factual error). README states "PHP 7.4+", but composer.json requires "php": ">=7.3". Should read PHP 7.3+ to match the repo.

2. Lost CI/quality badges. The old README linked Drone build status and SonarCloud Quality Gate / Security Rating / Coverage. The new one drops all four for generic shields. If those Sonar/Drone projects are still live, this is a downgrade — please confirm it's intentional.

3. agents.md filename casing. The cross-tool convention is AGENTS.md (uppercase), which is what Claude Code / Copilot / Codex look for. Lowercase may not be auto-discovered on case-sensitive filesystems. Consider renaming to AGENTS.md (and tick the test-plan item that validates it loads).

4. Generic Docker Hub badge. img.shields.io/docker/pulls/owncloud points at the owncloud user, and links to owncloud/server. The market app isn't shipped as its own image, so the badge is decorative/misleading for this repo.

5. Forward-looking boilerplate. The "License Migration to Apache 2.0" / "launched May 5, 2026" / OSPO governance text is fleet-wide boilerplate. Low risk, but it's marketing content in a technical README and will age. Not blocking.

Convention check

• PR title docs(ospo): … follows the repo's enforced Conventional Commits format. ✅
• No code touched → no test-coverage concern.
• All PR test-plan checkboxes are still unchecked — none of the link/render validations are confirmed.

Recommendation

Approve with minor changes. Non-functional, low-risk, net improvement to repo health. Before merge:

1. Fix PHP version to 7.3+.
2. Decide on the dropped Sonar/Drone badges — restore if still active.
3. Rename agents.md → AGENTS.md and tick the test-plan items.

The Docker badge and migration boilerplate are cosmetic — fine to leave if this is a standardized fleet-wide template.

🤖 Generated with Claude Code