David, First, apologies for top posting. I don't usually do that, but I have a bunch of emails to reply to tonight. In general, I am against relaxing the 2 silver requirements for Zephyr or any

We have a request for tweaking two silver requirements involving crypto (specifically TLS) from the Zephyr project. Some details below. We don’t have any particular text change proposals yet. If

This is an automated monthly status report of the best practicesbadge application covering the month 2018-03. Here are some selected statistics for most recent completed month,preceded by the same

All, for your information: The Linux Foundation's IT department has informed me that they are going to change how the mailing list works sometime in May 2018. If you just read the emails you

If you are a native/fluent Spanish speaker who’d be willing to do some translations for the best practices badge site, please contact me! If you know someone trustworthy who fits that bill, please

The OWASP Juice Shop project has (after some time) gotten a badge, and I plan to let their application stand: https://bestpractices.coreinfrastructure.org/projects/223 This is an odd project

Hi I finding issue while trying to update the https link in the CII badging for the following project https://bestpractices.coreinfrastructure.org/en/projects/1702 Under the section, The

A big “CONGRATS!” to the German translators, who just completed translating the BadgeApp into German. Thank you very much! We now have complete translations for German (de), French (fr),

This is an automated monthly status report of the best practicesbadge application covering the month 2018-02. Here are some selected statistics for most recent completed month,preceded by the same

I think we should switch from Common Vulnerability Scoring System (CVSS) version 2.0 to version 3.0 in the criteria. Any objections? We don’t need to do this quickly, but I’d like it to be in

I recently made some tweaks that seem to really bump up website performance. By adding some “preload” statements and a fragment cache, the front page on the “master” branch is getting

I’d like to say a quick “THANKS!” to Borja Martín, who has volunteered to work on a Spanish translation of the BadgeApp. He has already begun; once it’s further along, I look forward to

This is an automated monthly status report of the best practicesbadge application covering the month 2018-01. Here are some selected statistics for most recent completed month,preceded by the same

I just posted a very short & simple video titled “Quick demo on how to start getting a CII Best Practices badge” https://www.youtube.com/watch?v=dhLYLpsvvc0 There’s nothing fancy here

The best practices production site now has a new form for those who ask to delete projects (when they have the permissions necessary to do so). The system now requires that there be some text that

FYI, Mike Samuel let me know that he said nice things about the best practices badge project in his article "A Roadmap for Node.js Security". It is part of a larger discussion about how to aggregate

FYI, I thought I’d share some of the things that are going on in the CII best practices badge project. I think it’s especially important because much of this may be otherwise invisible to you.

This is an automated monthly status report of the best practicesbadge application covering the month 2017-12. Here are some selected statistics for most recent completed month,preceded by the same

The league/commonmark project (which implements a Markdown processor) has received a silver badge!! More details here: https://bestpractices.coreinfrastructure.org/projects/126 As always,

This is an automated monthly status report of the best practicesbadge application covering the month 2017-11. Here are some selected statistics for most recent completed month,preceded by the same