Code metrics

lpip is a small CLI. We still want a public example of how we develop: tests, coverage, static checks, CI, and releases.

This section is the exhibit. It is not required to use lpip.

Exhibit	Producer
Coverage	pytest-cov HTML from test:pytest (pipeline % + Cobertura too)
Ruff	ruff check JSON rendered as HTML
mypy	mypy --html-report on src
Bandit	Bandit JSON rendered as HTML (same family as Ruff)
pip-audit	PyPI advisories for [project] dependencies

CI writes those under artifacts/metrics/{coverage,ruff,mypy,bandit,pip-audit}/. scripts/assemble_docs.py copies each into the site when present; a local build without those files keeps the placeholder pages.

GitLab CI notes and ADRs stay in Git: docs/gitlab-ci.md, docs/adr/.