From 2506b5bf32ca2c427a1daf7b140edf8d61746505 Mon Sep 17 00:00:00 2001 From: nathanbaleeta Date: Wed, 27 Jan 2021 20:23:46 +0300 Subject: [PATCH 1/5] Encoded VIPS full submission into JSON --- screening/vips.json | 96 +++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 96 insertions(+) create mode 100644 screening/vips.json diff --git a/screening/vips.json b/screening/vips.json new file mode 100644 index 000000000..7713f2aa2 --- /dev/null +++ b/screening/vips.json @@ -0,0 +1,96 @@ +{ + "name": "VIPS", + "ownership": { + "isOwnershipExplicit": "Yes", + "copyrightURL": "https://nibio.no/en/services/vips" + }, + "dependencies": { + "mandatoryDepsCreateMoreRestrictions": "No", + "isSoftwarePltIndependent": "", + "pltIndependenceDesc": "" + }, + "documentation": { + "isDocumentationAvailable": "Yes", + "documentationURL": [ + "Incomplete documentation (Work in progress) available here: https://gitlab.nibio.no/VIPS/VIPSLogic/-/tree/develop/docs" + ] + }, + "NonPII": { + "collectsNonPII": "Yes", + "checkNonPIIAccessMechanism": "Yes", + "nonPIIAccessMechanism": "REST" + }, + "privacy": { + "isPrivacyCompliant": "Yes", + "privacyComplianceList": [ + "GDPR" + ], + "isLocIntlAdherent": "Yes", + "locIntlComplianceList": [ + "GDPR" + ] + }, + "standards": { + "supportStandards": "Unknown", + "standardsList": [ + "" + ], + "evidenceStandardSupport": [ + "", + "" + ], + "implementBestPractices": "No", + "bestPracticesList": [ + "" + ] + }, + "doNoHarm": { + "preventHarm": { + "stepsToPreventHarm": "Unknown", + "additionalInfoMechanismProcessesPolicies": "" + }, + "dataPrivacySecurity": { + "collectsPII": "Yes", + "typesOfDataCollected": [ + "Name", + "Email", + "Phone number" + ], + "thirdPartyDataSharing": "No", + "dataSharingCircumstances": [ + "" + ], + "ensurePrivacySecurity": "Yes", + "privacySecurityDescription": "Access to PII requires valid login. Servers are in-house, safe from e.g. the US Patriot Act." + }, + "inappropriateIllegalContent": { + "collectStoreDistribute": "Yes", + "type": "Weather data, risk model outputs, field observations of pests", + "contentFilter": "No", + "policyGuidelinesDocumentationLink": "", + "illegalContentDetection": "No", + "illegalContentDetectionMechanism": "" + }, + "protectionFromHarassment": { + "userInteraction": "No", + "addressSafetySecurityUnderageUsers": "Unknown", + "stepsAddressRiskPreventSafetyUnderageUsers": [ + "" + ], + "griefAbuseHarassmentProtection": "", + "harassmentProtectionSteps": [ + "" + ] + } + }, + "locations": { + "developmentCountries": [ + "Norway" + ], + "deploymentCountries": [ + "Norway", + "Sweden", + "India" + ] + } +} From fd3a8442b3469731930482a396cdcc1c1e24ee02 Mon Sep 17 00:00:00 2001 From: nathanbaleeta Date: Thu, 28 Jan 2021 23:26:06 +0300 Subject: [PATCH 2/5] Encoded VIPS full submission into JSON: updated standards and preventing harm --- screening/vips.json | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/screening/vips.json b/screening/vips.json index 7713f2aa2..d9b538080 100644 --- a/screening/vips.json +++ b/screening/vips.json @@ -31,13 +31,21 @@ ] }, "standards": { - "supportStandards": "Unknown", + "supportStandards": "Yes", "standardsList": [ - "" + "HTTPS", + "HTML5", + "CSS", + "JSON", + "Rest", + "AJAX", + "Java EE compliant", + "i10n", + "i18n" ], "evidenceStandardSupport": [ - "", - "" + "https://gitlab.nibio.no/VIPS/VIPSLogic", + "https://gitlab.nibio.no/VIPS/VIPSWeb" ], "implementBestPractices": "No", "bestPracticesList": [ @@ -46,8 +54,8 @@ }, "doNoHarm": { "preventHarm": { - "stepsToPreventHarm": "Unknown", - "additionalInfoMechanismProcessesPolicies": "" + "stepsToPreventHarm": "Yes", + "additionalInfoMechanismProcessesPolicies": "VIPS uses the https protocol to ensure safe communication between the user and the system. \n VIPS requires authentication to edit data. Users' personal data is only available to them. \n Geolocation data of field pest observations can be hidden or obfuscated by the user. \n Users in the admin system are assigned only the relevant roles for them. \n Credentials are encrypted on the server. \n All new functionality is tested using unit tests and subsequently functionality tested by VIPS staff before it's deployed to production." }, "dataPrivacySecurity": { "collectsPII": "Yes", From 9f164257f390f32d58c90ca7631497a91b26c1b8 Mon Sep 17 00:00:00 2001 From: nathanbaleeta Date: Thu, 4 Feb 2021 16:47:23 +0300 Subject: [PATCH 3/5] Updated VIPS submission to include explanation on how they integrate best practices into their work --- screening/vips.json | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/screening/vips.json b/screening/vips.json index d9b538080..53c831821 100644 --- a/screening/vips.json +++ b/screening/vips.json @@ -47,9 +47,16 @@ "https://gitlab.nibio.no/VIPS/VIPSLogic", "https://gitlab.nibio.no/VIPS/VIPSWeb" ], - "implementBestPractices": "No", + "implementBestPractices": "Yes", "bestPracticesList": [ - "" + "Relating to the Principles for Digital Development, the summary below describes how VIPS has integrated best practices into technology-enabled development programs for international development and cooperation:", + "1. Design with the user: The system has been designed and evolved during the past 20 years in close collaboration with the Norwegian Agricultural Advisory service. Workshops with farmers have been held several times during this period, where feedback has led to improvements and new features.", + "2. Understand the Existing Ecosystem: In addition to the Norwegian advisors; farmers, researchers and advisors in Sweden, Finland, Denmark, Lihtuania, Latvia, Switzerland, Bosnia-Hercegovina and India have been consulted. Through various international projects, the needs and the potential for VIPS have been clarified.", + "3. Design for Scale - Build for Sustainability: The system is funded on a long-term basis in Norway for Norwegian users. The system may be installed anywhere else as well, given that the resources are available. The system is simple, flexible and modular, allowing for scaling in almost any situation imaginable.", + "4. Open Standards: VIPS is Open Source and uses standards wherever possible in order to make communication between VIPS and external systems as easy as possible.", + "5. Reuse and Improve: By using Open Source software for building and as APIs/dependencies of the project, only the functionality specific of VIPS has been developed uniquely for the project.", + "6. Privacy & Security: Has been described in other parts of the DPG form.", + "7. Be Collaborative: Collaboration on development of models and the VIPS platform is made easy by the plug-in design for models and the clear separation of the system parts (micro/medium services loosely coupled). In fact, the latest version of VIPS was designed to relieve pest prediction model developers of the work of creating the infrastructure needed to make the model available to users across the globe. The system is also designed to cooperate with 3rd party systems to the greatest extent possible." ] }, "doNoHarm": { From 26d901bc7f831ee2469f4e5ad8f108638a2d1d5a Mon Sep 17 00:00:00 2001 From: nathanbaleeta Date: Thu, 11 Feb 2021 20:39:09 +0300 Subject: [PATCH 4/5] Updated VIPS documentation URL to latest and changed stage field from nominee to DPG --- nominees/vips.json | 2 +- screening/vips.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/nominees/vips.json b/nominees/vips.json index 43b2e0608..2745eb574 100644 --- a/nominees/vips.json +++ b/nominees/vips.json @@ -40,5 +40,5 @@ "org_type": "owner" } ], - "stage": "nominee" + "stage": "DPG" } diff --git a/screening/vips.json b/screening/vips.json index 53c831821..f00d6bbf0 100644 --- a/screening/vips.json +++ b/screening/vips.json @@ -12,7 +12,7 @@ "documentation": { "isDocumentationAvailable": "Yes", "documentationURL": [ - "Incomplete documentation (Work in progress) available here: https://gitlab.nibio.no/VIPS/VIPSLogic/-/tree/develop/docs" + "https://gitlab.nibio.no/VIPS/documentation" ] }, "NonPII": { From e78e271a8290799eaf3b4d81eb7462fa856b6fa0 Mon Sep 17 00:00:00 2001 From: nathanbaleeta Date: Thu, 11 Feb 2021 21:00:59 +0300 Subject: [PATCH 5/5] Updated VIPS branch which had outdated screened projects with old indicators for clear ownership and platform independence --- screening-schema.json | 8 ++++---- screening/apache-fineract.json | 4 ++-- screening/avyantra-health-technologies.json | 4 ++-- screening/dhis2.json | 4 ++-- screening/mifos-community-app.json | 4 ++-- screening/modular-open-source-identity-plaform.json | 4 ++-- screening/mojaloop.json | 4 ++-- screening/opencrvs.json | 4 ++-- screening/openg2p.json | 4 ++-- screening/primero.json | 4 ++-- screening/vips.json | 4 ++-- screening/x-road.json | 4 ++-- 12 files changed, 26 insertions(+), 26 deletions(-) diff --git a/screening-schema.json b/screening-schema.json index f5d3abf69..bd06fdf86 100644 --- a/screening-schema.json +++ b/screening-schema.json @@ -6,8 +6,8 @@ "title": "Digital Public Good", "required": [ "name", - "ownership", - "dependencies", + "clearOwnership", + "platformIndependence", "documentation", "NonPII", "locations", @@ -20,7 +20,7 @@ "type": "string", "description": "The name of the Digital Public Good." }, - "ownership": { + "clearOwnership": { "type": "object", "description": "3. Is ownership clearly defined?", "required": [ @@ -43,7 +43,7 @@ } } }, - "dependencies": { + "platformIndependence": { "type": "object", "description": "4. Does the license of libraries/dependencies undermine the openess of the project?", "required": [ diff --git a/screening/apache-fineract.json b/screening/apache-fineract.json index b3a457dcb..a201857eb 100644 --- a/screening/apache-fineract.json +++ b/screening/apache-fineract.json @@ -1,10 +1,10 @@ { "name": "Apache Fineract", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://www.apache.org/legal/src-headers.html" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/avyantra-health-technologies.json b/screening/avyantra-health-technologies.json index dae765924..100d7e67a 100644 --- a/screening/avyantra-health-technologies.json +++ b/screening/avyantra-health-technologies.json @@ -1,10 +1,10 @@ { "name": "Avyantra Health Technologies", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://drive.google.com/drive/folders/1bDbvRkc_kQatSCfLVX9LiczPzj7sI2Yn?usp=sharing" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/dhis2.json b/screening/dhis2.json index 53557df35..687ed7ce8 100644 --- a/screening/dhis2.json +++ b/screening/dhis2.json @@ -1,10 +1,10 @@ { "name": "DHIS2", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://github.com/dhis2/dhis2-core/blob/master/LICENSE" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/mifos-community-app.json b/screening/mifos-community-app.json index fb9fd7796..6823ec67c 100644 --- a/screening/mifos-community-app.json +++ b/screening/mifos-community-app.json @@ -1,10 +1,10 @@ { "name": "Mifos Community App", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://mifos.org/about-us/financial-legal/" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/modular-open-source-identity-plaform.json b/screening/modular-open-source-identity-plaform.json index 101d06c44..f095ea841 100644 --- a/screening/modular-open-source-identity-plaform.json +++ b/screening/modular-open-source-identity-plaform.json @@ -1,10 +1,10 @@ { "name": "Modular Open Source Identity Plaform", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://www.mosip.io/resource/ip-policy-trademark-and-copyright" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "Yes", "isSoftwarePltIndependent": "Yes", "pltIndependenceDesc": "For evey closed source software and hardware component that MOSIP interacts with, we provide standard interfaces for interaction. Either by using existing open standards (ex: For HSM we use JCE), or by defining standard interfaces for conformance (ex: MOSIP biometrics interfaces)" diff --git a/screening/mojaloop.json b/screening/mojaloop.json index 2eb2c454d..9b28bbc97 100644 --- a/screening/mojaloop.json +++ b/screening/mojaloop.json @@ -1,10 +1,10 @@ { "name": "Mojaloop", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://docs.mojaloop.io/documentation/mojaloop-background/ \n https://mojaloop.io/terms-of-use/" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/opencrvs.json b/screening/opencrvs.json index 8f49ae41d..027d604fe 100644 --- a/screening/opencrvs.json +++ b/screening/opencrvs.json @@ -1,10 +1,10 @@ { "name": "OpenCRVS", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "Copyright (C) Plan International Inc, Plan International Australia, Jembi Health Systems NPC and Vital Strategies Inc. https://github.com/opencrvs/opencrvs-core/blob/master/README.md" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/openg2p.json b/screening/openg2p.json index 541214e5d..c6366d082 100644 --- a/screening/openg2p.json +++ b/screening/openg2p.json @@ -1,10 +1,10 @@ { "name": "OpenG2P", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://docs.openg2p.org/" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/primero.json b/screening/primero.json index b46318f7a..11fb8bcea 100644 --- a/screening/primero.json +++ b/screening/primero.json @@ -1,10 +1,10 @@ { "name": "Primero", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/vips.json b/screening/vips.json index f00d6bbf0..5041c6c73 100644 --- a/screening/vips.json +++ b/screening/vips.json @@ -1,10 +1,10 @@ { "name": "VIPS", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://nibio.no/en/services/vips" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": "" diff --git a/screening/x-road.json b/screening/x-road.json index e7ca64911..ecd682151 100644 --- a/screening/x-road.json +++ b/screening/x-road.json @@ -1,10 +1,10 @@ { "name": "X-Road", - "ownership": { + "clearOwnership": { "isOwnershipExplicit": "Yes", "copyrightURL": "https://github.com/nordic-institute/X-Road-development" }, - "dependencies": { + "platformIndependence": { "mandatoryDepsCreateMoreRestrictions": "No", "isSoftwarePltIndependent": "", "pltIndependenceDesc": ""