// the find
lissy93/personal-security-checklist
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
A crowdsourced checklist of 300+ concrete security and privacy practices — password hygiene, network hardening, OS configuration, browser settings — published as markdown, a filterable Qwik website, and a small REST API. It's for people who want an opinionated, actionable security to-do list, not developers looking for a library to pull into their own code.
The YAML file (personal-security-checklist.yml) is the single source of truth that generates the markdown, the website, and the API, so the three surfaces can't drift out of sync. The website adds real functionality beyond static content — filtering by threat model and progress tracking via local storage — which makes the list actually usable instead of just readable. Contribution process enforces citations on PRs (per CONTRIBUTING.md) and CI (insert-checklist.yml, maintain-gh-pages.yml) automates regenerating derived formats, so the content has an actual review bar instead of being a dumping ground.
The API has no documented auth or rate limiting, and the README's Swagger docs link is a dead anchor — anyone building on it is trusting an undocumented free service with no stated SLA. The pipeline splits across two stacks (Python in lib/ for generation and the API, TypeScript/Qwik for the site) for what's conceptually one YAML-to-output flow, which raises the bar for anyone wanting to touch the tooling rather than just the content. There's no versioning on the checklist content itself — no changelog, just git history — so you can't tell at a glance which items are new, revised, or stable advice versus something added last week. Qwik is a niche enough framework that contributors to web/ need to learn resumability-specific patterns most frontend devs haven't touched, narrowing who can meaningfully contribute to that half of the repo.