Deep Dive Meeting - Wednesday, August 4th, 2021, 2:00 PM EST Meeting

[darcyclarke]

Why?

In our ongoing efforts to better listen to & collaborate with the community, we've started an Open RFC call that helps to move conversations & initiatives forward.

When?

Wednesday, August 4th, 2021, 2:00 PM EST

Cadence:
This meeting is scheduled to take place weekly. Previous meeting agendas and notes can be found here

Add to your Calendar:
You follow this & find other npm events by using our public events calendar

• gCal: https://calendar.google.com/calendar/embed?src=npmjs.com_oonluqt8oftrt0vmgrfbg6q6go%40group.calendar.google.com
• iCal: https://calendar.google.com/calendar/ical/npmjs.com_oonluqt8oftrt0vmgrfbg6q6go%40group.calendar.google.com/public/basic.ics

What?

All discussions surrounding RFCs are covered by the npm Code of Conduct. Please keep conversations constructive, civil & be mindful of when others are speaking. As is tradition, "raise your hand" when requesting to comment on a topic or request to comment asynchronously within the chat. The npm team may, at its own discretion, moderate, mute &/or remove a person from an Open RFC call for any reason.

Agenda

1. Housekeeping
   1. Introduction(s)
   2. Code of Conduct Acknowledgement
   3. Outline Intentions & Desired Outcomes
   4. Announcements
2. Topic:
   • audit improvements
3. References/Resources:
   • PR: #18 RFC: npm audit resolver - @naugtur
   • PR: #422 RFC: audit assertions - @bnb
   • Package Vulnerability Management & Reporting Collaboration Space
   • Oasis Common Security Advisory Framework Version 2.0 - 4.5 Profile 5: VEX
   • Open Source Security Foundation (@ossf)
     • Scorecard
     • Tooling
     • Disclosures & Guide
     • Criticality Score
     • GitHub Joins OSSF

How?

Join Zoom Meeting
https://github.zoom.us/j/94543839461?pwd=S0lwYytLd2tlMVBxTlJGbE5QQlhGUT09

Watch the livestream
https://www.youtube.com/channel/UCK71Wk0I45SLTSXQA23GdIw/videos

Invitees

Please use the following emoji reactions to indicate your availability.

• 👍 - Attending
• 👎 - Not attending
• 😕 - Not sure

[naugtur]

Format draft for assertions/decisions storage and exchange derived from audit-resolver: openjs-foundation/pkg-vuln-collab-space#11

[darcyclarke]

• Video Recording: https://youtu.be/YJrbwaYJ3hY
• Meeting Notes: https://github.com/npm/rfcs/blob/latest/meetings/2021-08-04.md