JavaScript Project Practices
Application skill for elsewhencode/project-guidelines ingest (awesome-guidelines). Line-level JS: javascript-coding-practices, node-coding-practices. Git detail: git-workflow-and-versioning. REST depth: api-design-practices. WCAG depth: wcag-accessibility-practices.
Core Principle
Maintainable JS projects combine feature-branch discipline, env-driven config, feature-folder structure, mechanical lint/test gates, and REST + a11y conventions from day one, not bolted on after launch.
When to Use / NOT
- New Node/React/Vue/Angular repo setup or major restructure.
- Auditing JS monolith layout, package.json, CI, README, API surface.
- Onboarding checklist for elsewhen-style projects.
NOT when:
- Single-file script, minimal
node-coding-practices only.
- Non-JS stack, use language-specific practice skill.
- Deep WCAG audit only,
wcag-accessibility-practices primary.
Workflow
- Git/docs, branches, commits, README (
js-project-git-docs.md).
- Env/deps/test, secrets, lockfile, colocated tests (
js-project-env-deps-test.md).
- Structure/style, folders, ESLint, logging (
js-project-structure-style.md).
- API/a11y/verify, REST, security, axe/lighthouse (
js-project-api-a11y-verify.md).
Red Flags
- Direct push to develop/master
- Secrets or tokens in committed source
- Missing package-lock.json (or yarn.lock)
- controllers/models folder split on small app
- Per-environment config file proliferation
- Committed build/dist output
- eslint-disable left in PR
- Large commented-out code blocks
- console.log in production client bundle
- REST URLs with verbs (
/getUsers)
- Database table names exposed in API paths
- Auth token in query string
- HTTP-served API in production
- No README sections from sample template
- UI project with zero a11y lint or audit setup
- Skipping local test/lint before PR
Verification
- Branch protection + required CI (lint, test)
.env.example without secrets; env validation at boot
- Lockfile committed; npm audit clean or documented exceptions
- Feature-folder tree; build gitignored
- README matches sample sections for project type
- API README or OpenAPI for HTTP services
- lighthouse/axe or jsx-a11y in CI for UI projects
References
awesome-guidelines/references/js-project-learning-note.md
awesome-guidelines/references/js-project-git-docs.md
awesome-guidelines/references/js-project-env-deps-test.md
awesome-guidelines/references/js-project-structure-style.md
awesome-guidelines/references/js-project-api-a11y-verify.md
Related skills
git-workflow-and-versioning, commit/branch conventions
api-design-practices, REST contract patterns
webappsec-coding-practices, web security depth
wcag-accessibility-practices, WCAG 2.1 AA
1---2name: javascript-project-practices3description: Use when bootstrapping or reviewing JavaScript/Node projects, elsewhen git/PR workflow, README template, env config, lockfiles, feature folders, ESLint/Prettier, REST API conventions, and lighthouse/axe from day one.4---56# JavaScript Project Practices78Application skill for elsewhencode/project-guidelines ingest (`awesome-guidelines`). Line-level JS: `javascript-coding-practices`, `node-coding-practices`. Git detail: `git-workflow-and-versioning`. REST depth: `api-design-practices`. WCAG depth: `wcag-accessibility-practices`.910## Core Principle1112Maintainable JS projects combine **feature-branch discipline**, **env-driven config**, **feature-folder structure**, **mechanical lint/test gates**, and **REST + a11y conventions from day one**, not bolted on after launch.1314## When to Use / NOT1516- New Node/React/Vue/Angular repo setup or major restructure.17- Auditing JS monolith layout, package.json, CI, README, API surface.18- Onboarding checklist for elsewhen-style projects.1920**NOT when:**2122- Single-file script, minimal `node-coding-practices` only.23- Non-JS stack, use language-specific practice skill.24- Deep WCAG audit only, `wcag-accessibility-practices` primary.2526## Workflow27281. **Git/docs**, branches, commits, README (`js-project-git-docs.md`).292. **Env/deps/test**, secrets, lockfile, colocated tests (`js-project-env-deps-test.md`).303. **Structure/style**, folders, ESLint, logging (`js-project-structure-style.md`).314. **API/a11y/verify**, REST, security, axe/lighthouse (`js-project-api-a11y-verify.md`).3233## Red Flags3435- Direct push to develop/master36- Secrets or tokens in committed source37- Missing package-lock.json (or yarn.lock)38- controllers/models folder split on small app39- Per-environment config file proliferation40- Committed build/dist output41- eslint-disable left in PR42- Large commented-out code blocks43- console.log in production client bundle44- REST URLs with verbs (`/getUsers`)45- Database table names exposed in API paths46- Auth token in query string47- HTTP-served API in production48- No README sections from sample template49- UI project with zero a11y lint or audit setup50- Skipping local test/lint before PR5152## Verification5354- Branch protection + required CI (lint, test)55- `.env.example` without secrets; env validation at boot56- Lockfile committed; npm audit clean or documented exceptions57- Feature-folder tree; build gitignored58- README matches sample sections for project type59- API README or OpenAPI for HTTP services60- lighthouse/axe or jsx-a11y in CI for UI projects616263## References6465- `awesome-guidelines/references/js-project-learning-note.md`66- `awesome-guidelines/references/js-project-git-docs.md`67- `awesome-guidelines/references/js-project-env-deps-test.md`68- `awesome-guidelines/references/js-project-structure-style.md`69- `awesome-guidelines/references/js-project-api-a11y-verify.md`7071## Related skills7273- `git-workflow-and-versioning`, commit/branch conventions74- `api-design-practices`, REST contract patterns75- `webappsec-coding-practices`, web security depth76- `wcag-accessibility-practices`, WCAG 2.1 AA