clomonitor
clomonitor copied to clipboard
cncf
CLOMonitor is a tool that periodically checks open source projects repositories to verify they meet certain project health best practices
All CNCF projects require 'thelinuxfoundation' as a user in the project, we should find a way to see if we can check for that
https://github.com/cncf/foundation/blob/main/project-maintainers.csv houses all the top-level maintainers for all CNCF projects. This is used to do things like allow access to CNCF's Service Desk. We should validate that a project exists...
As this has moved forward significantly, we should open this up to the Cloud Native contributor community at large :) - [x] Schedule a monthly(?) community meeting / office hours...
We should check that a project has published a CVE https://github.com/containerd/containerd/security/advisories It shouldn't have a ton of weight but it's a good practice for projects to do so
Bumps the frontend group with 15 updates in the /web directory: | Package | From | To | | --- | --- | --- | | [apexcharts](https://github.com/apexcharts/apexcharts.js) | `3.46.0` |...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps the frontend group in /web with 1 update: [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `typescript-eslint` from 7.9.0 to 7.10.0 Release notes Sourced from typescript-eslint's releases. v7.10.0 7.10.0 (2024-05-20) 🚀 Features eslint-plugin: [sort-type-constituents] support...
Bumps [minimatch](https://github.com/isaacs/minimatch) from 9.0.5 to 10.0.1. Changelog Sourced from minimatch's changelog. change log 10.0 Require node 20 or 22 and higher 9.0 No default export, only named exports. 8.0 Recursive...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.14.12 to 22.0.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps the frontend group in /web with 1 update: [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `typescript-eslint` from 7.17.0 to 7.18.0 Release notes Sourced from typescript-eslint's releases. v7.18.0 7.18.0 (2024-07-29) 🚀 Features types: update ECMA...
It would be good if we can get a CSV dump or sheet view of all the filtered data in clomonitor This is related to: https://github.com/cncf/landscape2/issues/659