The Softreuse Product Standard
AI can generate code. What it can't give you is a reason to trust it. This is the checklist a module has to pass before we list it. It is the same checklist we use internally, and a failed item blocks a release.
Code
- TypeScript strict mode, clean typecheck
- Tests on every supported Node version, covering failure paths, not only the happy path
- Concurrency-sensitive logic tested against the real database, not just mocks
- Clean build from a fresh install
- Minimal runtime dependencies, each one justified
Security
- Dependency audit and a secrets scan of the packaged archive
- Written threat model: what the module defends against and what it explicitly does not
- Secure defaults; every unsafe option is opt-in and documented
- Input validated at the boundary, parameterised SQL, no secrets or personal data in logs
- A deployment checklist for the buyer
Compatibility
- Supported runtime, framework and database versions stated up front
- Fresh-install test: unzip, install, run the tests, run the demo
- Semantic versioning. Breaking changes only in a new major version
Documentation
- Install, quick start, configuration reference, examples and troubleshooting
- An architecture document that explains why, not just what
- Documentation snippets are taken from type-checked example code
- A changelog entry for every release
Packaging
- Only source, tests, examples, migrations and docs. No build output, editor files or environment files
- Reproducible archive: the same input always produces the same SHA-256, which we show you so you can verify your download
- A commercial license that fits on a screen
Honesty
- Each product page says what the module is not for
- No claims about usage, customers or results that we cannot verify
What this does not mean
Passing the standard means a module is tested, documented and carefully built. It does not mean it is free of bugs or right for every system. Every product page lists its limits, and you should still review the source against your own requirements: you get all of it.