This is an automated monthly status report of the best practices badge application covering the month 2018-03. Here are some selected statistics for most recent completed month, preceded by the same s

All, for your information: The Linux Foundation's IT department has informed me that they are going to change how the mailing list works sometime in May 2018. If you just read the emails you receive,

If you are a native/fluent Spanish speaker who’d be willing to do some translations for the best practices badge site, please contact me! If you know someone trustworthy who fits that bill, please con

The OWASP Juice Shop project has (after some time) gotten a badge, and I plan to let their application stand: https://bestpractices.coreinfrastructure.org/projects/223 This is an odd project for the b

A big “CONGRATS!” to the German translators, who just completed translating the BadgeApp into German. Thank you very much! We now have complete translations for German (de), French (fr), Japanese (ja)

This is an automated monthly status report of the best practices badge application covering the month 2018-02. Here are some selected statistics for most recent completed month, preceded by the same s

I think we should switch from Common Vulnerability Scoring System (CVSS) version 2.0 to version 3.0 in the criteria. Any objections? We don’t need to do this quickly, but I’d like it to be in the queu

I recently made some tweaks that seem to really bump up website performance. By adding some “preload” statements and a fragment cache, the front page on the “master” branch is getting webpagetest.org

I’d like to say a quick “THANKS!” to Borja Martín, who has volunteered to work on a Spanish translation of the BadgeApp. He has already begun; once it’s further along, I look forward to adding to the

This is an automated monthly status report of the best practices badge application covering the month 2018-01. Here are some selected statistics for most recent completed month, preceded by the same s

I just posted a very short & simple video titled “Quick demo on how to start getting a CII Best Practices badge” https://www.youtube.com/watch?v=dhLYLpsvvc0 There’s nothing fancy here – I didn’t even

The best practices production site now has a new form for those who ask to delete projects (when they have the permissions necessary to do so). The system now requires that there be some text that exp

FYI, Mike Samuel let me know that he said nice things about the best practices badge project in his article "A Roadmap for Node.js Security". It is part of a larger discussion about how to aggregate i

FYI, I thought I’d share some of the things that are going on in the CII best practices badge project. I think it’s especially important because much of this may be otherwise invisible to you. Details

This is an automated monthly status report of the best practices badge application covering the month 2017-12. Here are some selected statistics for most recent completed month, preceded by the same s

The league/commonmark project (which implements a Markdown processor) has received a silver badge!! More details here: https://bestpractices.coreinfrastructure.org/projects/126 As always, if there’s a

This is an automated monthly status report of the best practices badge application covering the month 2017-11. Here are some selected statistics for most recent completed month, preceded by the same s

All: We want to slowly & carefully update the criteria as community norms improve. However, I don't see any need to update the criteria at this time. The passing criteria in particular appear to be "j

This is an automated monthly status report of the best practices badge application covering the month 2017-10. Here are some selected statistics for most recent completed month, preceded by the same s

All: We’ve just learned that someone had created a project badge entry on a *test* tier (master), with the intent of using that as the main information source. Since that’s not what the test tiers are