Ulises Gascón
Ulises Gascón
We agreed on #1175 to open an issue to follow up a discussion about this requirement for Node.js (cc: @mhdawson @ljharb @RafaelGSS) > The project website, repository (if accessible via...
### Notes This is currently under a draft version. They main objetive is to collect early feedback before creating the final PR (proper linting, tests, etc...) This is my first...
npm recently introduces [the Generating provenance statements](https://docs.npmjs.com/generating-provenance-statements). I think it will be a good idea to include a reference in [the release section](https://github.com/ossf/package-manager-best-practices/blob/main/published/npm.md#release) Should I create a PR for that?...
### Changes  **New** - A04:2021 - Insecure Design - A08:2017 - Insecure Deserialization -> A08:2021 - Software and Data Integrity Failures - A10:2021 - Server-Side Request Forgery (SSRF) **Relocate**...
### Main Changes I had some issues to run the project locally, so I explored a way to run the project using Docker (including live reloading). Also I added an...
In our recent TC meeting, we discussed the need for a more efficient method of detecting outdated translated versions of our documentation. Below is a proposal aimed at addressing this...
In our recent TC meeting, we discussed the necessity to review the `v5.x` documentation due to discrepancies with changes made in `v4.x` that were not ported over. Additionally, we need...
As discussed in https://github.com/expressjs/discussions/issues/224 and https://github.com/expressjs/discussions/issues/196. Here is a proposal to set Node@18 as the minimum version supported by Express v5.x ### Main Changes - Set Node 18 as the...
I would like to nominate @carpasse to the triage team. They have been actively helping with GitHub actions and supporting important initiatives such as the OSSF Scorecard (see: https://github.com/expressjs/security-wg/issues/2) **Here...