1# Contributing to Peach23Thank you for your interest in contributing. Peach is built and maintained by Asha Software.45## Before Contributing67- Open an issue before starting significant work — this avoids duplicated effort8- Read the security documentation in `security/` to understand the threat model9- Peach takes cryptographic correctness seriously — changes to `src/crypto/` require careful review1011## Development Setup1213```bash14bun install --frozen-lockfile15bun run dev 16bun run test 17bun run typecheck 18```1920## What We Welcome2122- Bug fixes with tests23- Security findings (see security reporting in `security/README.md`)24- Compatibility improvements for specific browsers or sites25- Documentation improvements26- Translations (contact us first)2728## What We're Cautious About2930- Changes to cryptographic code — these require extra scrutiny and discussion31- New dependencies — we keep dependencies minimal and exact-pinned for security reasons32- Breaking changes to the vault format — these require migration paths33- UI changes — Peach has a specific design language, large visual changes need discussion first3435## Code Style3637- TypeScript strict mode throughout38- Tests required for new functionality39- `tsc --noEmit` and the full test suite must pass4041## Security Issues4243Please do not open public issues for security vulnerabilities. Email [email protected] instead.4445## License4647By contributing you agree that your contributions will be licensed under GPL v3.