h5bp/html5-boilerplate

This system is a static site build tool that compiles source assets into a distribution folder using Webpack and Gulp. It manages the bundling of JavaScript and CSS, generates an HTML5 boilerplate index page, and supports Progressive Web App features via a web manifest. The project includes a test suite to verify the integrity and content of the generated build output.

The dist directory is introduced with a foundational project structure, including an HTML5 boilerplate index.html, a 404 error page, and a site.webmanifest for progressive web app support. The build system is configured using Webpack (webpack.common.js, webpack.config.dev.js, webpack.config.prod.js) to bundle JavaScript and manage assets. Supporting configuration files such as .editorconfig, .gitattributes, and .gitignore are added to standardize code formatting and repository behavior.

dist · high confidence

This change introduces the foundational configuration files and build scripts for the project. It adds \.editorconfig\ to enforce consistent coding styles (UTF-8, LF line endings, 2-space indentation), \.gitattributes\ to normalize line endings across platforms, and \.gitignore\ to exclude build artifacts and OS-specific files. It also includes \.cspell.json\ for spell-checking, \.npmrc\ for npm registry settings, and Prettier configuration (\.prettierrc.json\, \.prettierignore\). Furthermore, it establishes the build pipeline via \gulpfile.mjs\ (using Gulp 5, Webpack, and ESLint) and \eslint.config.mjs\ for JavaScript linting, alongside standard project metadata files like \LICENSE.txt\, \README.md\, and \CHANGELOG.md\.

(repo-wide) · high confidence

The project's build process has been replaced with Webpack, introducing configuration files (webpack.common.js, webpack.config.dev.js, webpack.config.prod.js) that handle asset bundling, development server live-reload, and production optimization via plugins like HtmlWebpackPlugin and CopyPlugin. This change also establishes a standardized development environment through new .editorconfig and .gitattributes files, and updates the source structure to use app.js and style.css as the primary entry points.

src · high confidence

The primary CSS file in the distribution folder has been renamed from main.css to style.css. This change affects the output of the build process, meaning users referencing the default stylesheet in their HTML must update their link tags to point to style.css instead of main.css.

dist/css · high confidence

New test files have been added to verify the integrity of the build output. The \file\_existence.mjs\ test ensures that the \dist\ and \archive\ directories contain exactly the expected set of files (such as \style.css\, \index.html\, and webpack configs) and no unexpected ones. The \file\_content.mjs\ test verifies that the generated \style.css\ includes the correct HTML5 Boilerplate version banner.

test · high confidence

The project's development dependencies have been updated to newer major versions, including Gulp 5, ESLint 10, Mocha 12, and Webpack 5.110.3. The minimum supported Node.js version has been raised to 22, and the \package.json\ now includes an \overrides\ section to enforce specific versions for \diff\ and \serialize-javascript\.

(dependencies) · high confidence

A .gitkeep file has been added to the src/img directory to ensure the folder is tracked by version control even when empty.

src/img · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 63 → 62 (-0.3)
• Rubric changed (rubric-2026.09.11 → rubric-2026.09.18) — scores are not directly comparable.

• Code Health 70 → 70 (+0.0)
• Architecture 69 → 69 (+0.0)
• Maturity 88 → 88 (+0.0)
• Readiness 76 → 75 (-0.3)
• Security 69 → 68 (-1.3)
• Accessibility 54 → 54 (+0.0)

• Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (no pnpm-resolved versions to grade)

• Dependency hygiene PARTLY measured — npm pinning read, dependency currency not (the committed lockfile resolved no direct production dependency)
• High CVE: [GHSA redacted] (package-lock.json)
• High CVE: [GHSA redacted] (package-lock.json)
• No SBOM

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

h5bp/html5-boilerplate was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.