🎬 Boxdbud.io

February 16, 2026 · View on GitHub

Boxdbud.io brand

License: AGPL v3 React TypeScript Cloudflare

Find movies all your friends want to watch.

Boxdbud.io connects to Letterboxd, compares multiple watchlists, and shows you the common movies for your next group watch.

🚀 Live Application

Launch Boxdbud.io →

  • No Installation Required: Instant access from any modern web browser.

✨ Features

  • ✔️ Letterboxd Integration: Scrapes complete watchlists with full pagination support.
  • 👥 Multi-User Comparison: Compare watchlists between yourself and up to 4 friends.
  • 🚀 TMDB Enhancement: Enriches movies with posters, ratings, genres, and director info.
  • 🎭 Genre Display: Shows movie genres as interactive badges on result cards for easy browsing.
  • ⚡ Intelligent Caching: Utilizes a Cloudflare D1 database for rapid subsequent comparisons.
  • 🎨 Responsive Design: A clean, Letterboxd-inspired dark theme that works on any screen size.
  • 🔒 Secure by Design: All external API interactions are handled server-side; no user API keys are required or stored.

📖 User Guide

Step 1: Access the Application

Navigate to boxdbud.io.

Step 2: Enter Usernames

  1. Your Username: Enter your exact Letterboxd username.

Step 3: Compare and View Results

  1. Click "Compare Watchlists". The app will scan all watchlists and find common movies.
  2. Results are sorted to show movies that the most friends have on their watchlists.
  3. Each movie card displays genres as badges for easy identification and browsing.
  4. Click any movie poster to view detailed information on Letterboxd.

🛠️ Development Setup

Interested in contributing? Here’s how to get the development environment running.

Prerequisites

  • Node.js (v18 or later)
  • Git
  • A code editor (VS Code is recommended)

Installation

  1. Clone the repository:
git clone https://github.com/your-username/BoxdBuddies.git
cd BoxdBuddies

  1. Install dependencies:

    npm install

  2. Start the development server:

    npm run dev

    The application will be available at http://localhost:5173.

Optional Developer Tools

SonarLint Integration

SonarLint provides real-time code quality and security feedback in your IDE. To use SonarLint with this project:

  1. Install the SonarLint extension for your IDE (VS Code, IntelliJ, etc.)

  2. Optional: Connect to SonarCloud (for team-shared rules and analysis):

    • Open SonarLint settings in your IDE
    • Add a new connection to SonarCloud
    • Configure the connection with:
      • Connection ID: Your choice (e.g., your GitHub username)
      • Project Key: Wootehfook_BoxdBuddies
    • Note: This configuration is personal and should not be committed to the repository

  3. Local-only mode: SonarLint works without any connection, using default rules

This setup is entirely optional and personal to each developer. SonarLint connected-mode settings should remain in your personal IDE configuration and should not be committed to the repository.

Project Structure

BoxdBuddies/
├── src/                    # React frontend source
├── functions/              # Cloudflare Functions (serverless backend)
├── migrations/             # Cloudflare D1 database schema
├── public/                 # Static assets
├── .github/                # GitHub workflows and configurations
├── wrangler.toml           # Cloudflare configuration
└── README.md               # This file

🤝 Contributing

We welcome contributions! Please follow these guidelines to help us keep the project organized and maintainable.

Git Workflow

This repository follows a Gitflow-inspired branching strategy:

  1. Branch from develop: git checkout develop && git pull && git checkout -b feature/your-feature-name
  2. Make your changes and test them locally.
  3. Format your code: npm run lint
  4. Commit your changes using the Conventional Commits format.
  5. Push to your fork and create a Pull Request targeting develop.

Branch Hierarchy:

  • feature/*, fix/*, chore/*, etc. → PR to develop
  • develop → Integration branch for day-to-day work
  • release/*, hotfix/* → PR to main (for releases and critical fixes)
  • main → Production-ready code

Note: If you accidentally target main, the auto-retarget workflow will redirect your PR to develop.

Code Style

  • TypeScript/React: Adheres to the project's ESLint and Prettier configurations.
  • Cloudflare Functions: Follow modern TypeScript and Cloudflare Workers best practices.
  • AI Attribution: Any AI-generated code must include a comment with the timestamp and model identity (e.g., // AI Generated: GitHub Copilot (GPT-5.2-Codex) - 2025-08-15).

Versioning and Releases

This project follows Semantic Versioning and maintains a CHANGELOG.md following the Keep a Changelog format.

Automated Changelog Updates:

  • When a PR is merged to main or develop, the changelog is automatically updated based on the PR title
  • Use Conventional Commits format in PR titles:
    • feat: for new features (added to "Added" section)
    • fix: for bug fixes (added to "Fixed" section)
    • chore:, docs:, refactor:, etc. (added to "Changed" section)

Creating a Release:

  1. Ensure all changes are documented in the [Unreleased] section of CHANGELOG.md
  2. Go to Actions → "Version Bump and Release" workflow
  3. Click "Run workflow" and select the version bump type:
    • patch for bug fixes (2.1.0 → 2.1.1)
    • minor for new features (2.1.0 → 2.2.0)
    • major for breaking changes (2.1.0 → 3.0.0)
  4. Optionally add release notes
  5. The workflow will:
    • Update package.json version
    • Move unreleased changes to a new version section in CHANGELOG.md
    • Create a git tag
    • Create a GitHub release with the changelog content

Check Current Version:

npm run version:current

🛡️ Security Policy

This project prioritizes security. All API keys are managed via Cloudflare secrets, and no sensitive user data is stored.

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

  • Use the "Report a vulnerability" feature under the "Security" tab in the GitHub repository.
  • We aim to acknowledge reports within 48 hours and provide regular updates until resolution.

Contributor Best Practices

  • Never commit API keys, passwords, or other sensitive data.
  • Validate all external inputs within your code.
  • Keep dependencies updated and run npm audit regularly.

📄 License

BoxdBuddies is licensed under the GNU Affero General Public License v3.0 (AGPL-3.0).

In short, this means:

  • ✅ You can use, modify, and share it for personal projects.
  • ✅ You must share the source code of any modifications you distribute.
  • ❌ Commercial use is strictly prohibited. You cannot sell it, charge for access, or include it in proprietary software.

See the LICENSE file for full details.