nodejs / security-wg

Node.js Ecosystem Security Working Group

nodejs/security-wg Issues

Proposed approach for build steps in deps which are not in make node
Updated 7 days ago3
Permission Model adoption from Package Managers
Updated 7 days ago3
Adding language to Bug Bounty program to differentiate "security features" from "defense in depth features"
Closed 8 days ago1
Node.js Security Initiatives 2024
Updated 8 days ago12
More control over remote debugging (and killing)
Closed 9 days ago4
Require optional PoC videos from hackers to help triaging reports
Closed 10 days ago
Scores of vulnerability found in experimental features can be too high
Updated 13 days ago8
Node.js Security team Meeting 2024-04-25
Closed 14 days ago1
Discuss adding --security-revert to NODE_OPTIONS
Updated 15 days ago
Can we have "unsecure" features in Node.js?
Updated 15 days ago4
Collaborators Inactivity Policy Review
Updated 15 days ago3
OpenSSF Scorecard Report Updated!
Closed 15 days ago
OpenSSF Scorecard Report Updated!
Closed 15 days ago
Security Vulnerability to report
Closed 16 days ago1
Threat Model question about Permission Model
Closed 17 days ago2
HackerOne page does not mention the threat model
Closed 19 days ago1
Requirement (Silver level): Hardening mechanisms
Updated 20 days ago1
Question: Why do we have a `--experimental-policy`?
Closed 22 days ago4
dependabot suggesting pre-release update
Updated 23 days ago1
OpenSSF Scorecard Report Updated!
Closed a month ago
Node.js Security team Meeting 2024-04-11
Closed a month ago5
OpenSSF Scorecard Report Updated!
Closed a month ago
Requirement (Gold level): Use basic good cryptographic practices
Updated a month ago3
Requirement (Gold level): The project MUST include a license and copyright statement in each source file
Updated a month ago2
Requirement (Gold level): Secured delivery against man-in-the-middle (MITM) attacks
Updated a month ago2
Requirement (Gold level): The project MUST have FLOSS automated test suite(s) that provide at least 80% branch and 90% statement coverage
Updated a month ago1
April 3, 2024 security releases have not been announced on the nodejs-sec mailing list
Closed a month ago2
Node.js Security team Meeting 2024-03-28
Closed a month ago2
OpenSSF Scorecard Report Updated!
Closed a month ago
Node.js Security team Meeting 2024-03-14
Closed 2 months ago3
Node.js Security team Meeting 2024-02-29
Closed 2 months ago5
Node.js Security team Meeting 2024-02-01
Closed 2 months ago3
OpenSSF Scorecard Report Updated!
Closed 2 months ago
Node.js Security team Meeting 2024-02-15
Closed 2 months ago1
OpenSSF Scorecard Report Updated!
Closed 2 months ago
February 6 2024 Security Releases not announced to nodejs-sec
Closed 2 months ago3
Mitre organization for CVE id request
Updated 2 months ago28
Read time outs in "Check for vulnerabilities daily" workflow
Updated 2 months ago
OpenSSF Scorecard Report Updated!
Closed 2 months ago
OpenSSF Scorecard Report Updated!
Closed 3 months ago1
OpenSSF Scorecard Report Updated!
Closed 3 months ago
regarding installation of node
Closed 3 months ago1
zoom link does not appear on the calendar
Closed 4 months ago1
OpenSSF Scorecard Report Updated!
Closed 4 months ago1
OpenSSF Scorecard Report Updated!
Closed 4 months ago
Node.js Security team Meeting 2024-01-18
Closed 4 months ago1
OSTIF<>Fuzzing Audit update to security-wg for February 1 meeting.
Closed 4 months ago1
OpenSSF Scorecard Report Updated!
Closed 4 months ago
OpenSSF Scorecard Report Updated!
Closed 4 months ago
Drop openssl-v1-update
Closed 4 months ago