Ulises Gascón

Migrate to Github Actions

1

### Main Changes - Replaced Travis config for Github Actions pipeline (including Badge in Readme) - Fixed coverage report as the argument `--coverage` was missing in the Npm Script (f87eaad)...

PGP keys verification

4

### Context - The full context can be found at [GHSA-76h5-j8cf-q8vj](https://github.com/nodejs/nodejs.org/security/advisories/GHSA-76h5-j8cf-q8vj) and [GHSA-jcj3-qxpv-gxm2](https://github.com/nodejs/nodejs.org/security/advisories/GHSA-jcj3-qxpv-gxm2). - Additional offline conversation at [Slack](https://openjs-foundation.slack.com/archives/C045YHZC2SU/p1698489423086659) ### Action items - [ ] As part of the onboarding...

problems with llhttp 9.x upgrades in v20.x

7

I created this issue for visibility, based on [team slack discussion](https://openjs-foundation.slack.com/archives/C045YHZC2SU/p1704738396230359) When I was working on the release 20.11.0 proposal (step 10) I was checking the dependencies and I got...

Requirement (Gold level): The project MUST have FLOSS automated test suite(s) that provide at least 80% branch and 90% statement coverage

6

We agreed on #1175 to open an issue to follow up a discussion about it for Node.js (cc: @mhdawson @RafaelGSS) > The project MUST have FLOSS automated test suite(s) that...

Requirement (Silver level): Hardening mechanisms

2

We agreed on #1175 to open an issue to follow up a discussion about the hardening mechanisms for Node.js (cc: @mhdawson @tniessen @RafaelGSS) > Hardening mechanisms SHOULD be used in...

As discussed in #1175 this PR add commit references and not branch references in the links.

CII-Best-Practices for Nodejs: Gold level

6

**Initiative:** #953 **Related:** #955 and #1087 This pull request contains a dump of the current [questions and answers](https://bestpractices.coreinfrastructure.org/en/projects/29?criteria_level=2) for the Node.js project in OpenSSF Best Practices for **Gold Level**. The...

Initiative for CII-Best-Practices for Nodejs Projects

37

As commented in #884 seems like there is an interest to explore this idea. **Context** I discovered that we already completed the process for [Nodejs](https://bestpractices.coreinfrastructure.org/en/projects/29#analysis), last update at 2016-05-19. I...

Requirement (Gold level): Use basic good cryptographic practices

9

We agreed on #1175 to open an issue to follow up a discussion about this requirement for Node.js (cc: @mhdawson @ljharb @RafaelGSS) > The software produced by the project MUST...

Requirement (Gold level): The project MUST include a license and copyright statement in each source file

8

We agreed on #1175 to open an issue to follow up a discussion about the these requirements for Node.js (cc: @mhdawson @ljharb @RafaelGSS) > The project MUST include a copyright...