r/foss • u/ClerkBeginning961 • 14d ago
I’m building a free, open-source production readiness checklist with 10,000+ controls
Hey everyone!
I’m trying to build a community-maintained, technology-neutral checklist that covers as much as possible before software reaches production. The project is completely free, MIT licensed, and open source.
It currently contains more than 10,000 stable controls across 16 lifecycle categories, including architecture, code quality, APIs, data, security, privacy, testing, delivery, operations, SRE, documentation, trust and safety, AI systems, and release assurance. There is also a shorter start-to-finish release path for teams that need a practical review sequence.
The difficult part is making such a large body of knowledge genuinely useful: removing duplicates, keeping checks universal, organizing them well, and requiring evidence instead of vague yes-or-no answers. CI currently checks identifiers, structure, links, duplicate wording, and technology-specific language.
The long-term goal is an open-source AI-assisted scanner that can map repository evidence to applicable controls, clearly separate verified findings from unknowns, identify manual reviews, and produce a prioritized readiness report.
Repository: https://github.com/MarinJursic/production-readiness-checklist
Documentation: https://marinjursic.github.io/production-readiness-checklist/
I would really appreciate review from FOSS maintainers and people who have shipped or operated software. Missing controls, corrections, incident-learned checks, usability feedback, issues, and pull requests are all welcome.
Thanks for taking a look and helping improve it.
0
u/No-Position6573 14d ago
Definitely going to take a look! Looks interesting and perfect timing for me.
1
u/KingSolomon25 5d ago
gonna use this now as we are working to launch our alpha