Sascha Brawer

Leaderboard for most active users

3

On behalf of mapathons, projects of the month, and similar events, could Osmose display a leaderboard that shows how many Osmose issues were handled (either fixed or marked as false...

Extend Feature File syntax to support Unicode Variation Sequences

6

Could the [Feature File syntax](http://www.adobe.com/devnet/opentype/afdko/topic_feature_file_syntax.html) be extended so that designers could define [standardized variants](http://www.unicode.org/Public/UCD/latest/ucd/StandardizedVariants.txt) via [`cmap` format 14](https://www.microsoft.com/typography/otspec/cmap.htm)?

Test suite

1

Do you have any test cases for OpenType shaping that could be contributed to the [Unicode test suite for text rendering](https://github.com/unicode-org/text-rendering-tests)? (Disclaimer: I'm maintaining that test suite, and honestly I...

On the OpenSanctions website, the list of sanctions for [this company](https://www.opensanctions.org/entities/li-entsg-450328d347574d3a824f68c11527a1ac1cc49217/) is currently not very informative.  Proposals: 1. When a Sanction has neither `startDate`nor `endDate` set, display the value...

How to model penalties and fines?

1

Schema question: How to model penalties, fines and similar punishments that are not debarments? I’m currently working on a pull request for #335 to bring the [Liechtenstein sanctions list](https://www.llv.li/de/unternehmen/berichtspflichten-bewilligungen/grenzueberschreitende-dienstleistungen/entsendung-von-arbeitnehmern/sanktionsliste-gemaess-art.-7-abs.-4-entsg) into...

Add `x509-svid` and `jwt-svid` to IANA registry for RFC 7517

1

Should `x509-svid` and `jwt-svid` be added to the [IANA JSON Web Key Use registry](https://www.iana.org/assignments/jose/jose.xhtml#web-key-use)? See [RFC 7517 section 8](https://www.rfc-editor.org/rfc/rfc7517#section-8) for the registration process (it’s just an email) and [section 8.2.1](https://www.rfc-editor.org/rfc/rfc7517#section-8.2.1)...

Fix test cases for CMAP, GPOS and GSUB

14

Thanks to @fpirsch’s fix in #324, it’s again possible to run the [Unicode test suite for text rendering engines](https://github.com/unicode-org/text-rendering-tests) on OpenType.js. ## Expected Behavior All test cases should pass. ##...

Limit GSUB buffer size

2

Allsorts 0.14.0 is vulnerable to an OpenType version of the [billion laughs attack](https://en.wikipedia.org/wiki/Billion_laughs_attack). The attack vector is a font with a malicious but well-formed `GSUB` table. Failing test case: https://rawgit.com/unicode-org/text-rendering-tests/master/reports/Allsorts.html#GSUB-3...

Consider adding a [security policy](https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository), telling how to report vulnerabilities.