You should not commit these four types of files into your Git repository.
- Files that don't belong to the project
- Files that are automatically generated
- Libraries (depends on the situation)
- Credentials
Files that don't belong to the project
Files like .DS_Store
(for Mac OS), Thumds.db
(for Windows), .vscode
(for code editors) have nothing to do with your project.
They should not be checked in.
Files that are automatically generated
This includes files from preprocessors (like Sass to CSS). You don't check in the CSS. You check in the Sass files.
If you use JavaScript compilers like Webpack or Rollup, you don't check in the generated JavaScript file. You check in the code you write.
Libraries
If you don't use a package manager, you should check in your libraries. This is because if you want to download the library, you have to:
- Google for the library
- Get to the website
- Find the link
- Download the library
- Put into your project
This process is tedious. If your code needs the library to work, you should check in the library.
On the other hand, if you use a package manager, you shouldn't check in a library because you can install the library with a single command like npm install
.
Credentials
You shouldn't store credentials like usernames, passwords, API keys and API secrets.
If someone else steals your credentials, they can do nasty things with it. I almost lost $40,00 to $60,000 because a friend accidentally exposed my amazon credentials. Luckily, the amount was waived.
If you don't want to get into sticky situations like I did, then don't store your credentials in a Git repository.
Thanks for reading. This article was originally posted on my blog. Sign up for my newsletter if you want more articles to help you become a better frontend developer.
Top comments (2)
Nice article.
Any advice on how to handle credentials, or just use the usual environment variables approach? π
environment variables works.