OpenJS Project Security Compliance Surveys

[ruddermann]

Q1'25

• Complete Security Compliance Guidelines of Impact and select At Large OpenJS Projects
• Perform surveys of Impact and select At Large Hosted Project adherence to existing SBOM and C-SCRM Guidelines
• Complete survey of Impact and select At Large hosted project adherence to OpenJS CVD Guidelines
• Develop Security Improvement Plans and identify potential A-O support opportunities for all surveyed projects

Q2'25

• Continue surveys of At Large Projects
• Perform surveys of At Large Hosted Project adherence to existing SBOM and C-SCRM Guidelines
• Complete survey of Impact and select At Large hosted project adherence to OpenJS CVD Guidelines
• Develop Security Improvement Plans and identify potential A-O support opportunities

Q3'25

• Complete Surveys of all At Large and Incubating Projects
• Perform surveys of At Large Hosted Project adherence to existing SBOM and C-SCRM Guidelines
• Complete survey of Impact and select At Large hosted project adherence to OpenJS CVD Guidelines
• Complete Security Improvement Plans and identify potential A-O support opportunities

Impact Projects

• Appium
• Dojo
• Electron
• Express
• jQuery
• Node.js
• webpack

At Large Projects

• Amp
• architect
• ESLint
• Esprima
• Fastify
• Globalize
• Grunt
• Interledger.js
• Intern
• NativeScript
• JerryScript
• Jest
• LoopBack
• Lodash
• Marko
• messageformat
• Mocha
• Moment
• Node-RED
• nvm
• QUnit
• WebdriverIO
• webhint

Incubating Projects

• ajv
• kepler.gl
• vis.gl