boB Rudis

Security/Safety "Best Practices" for rOpenSci Package Developers/Reviewers

16

We've done _a bit_ of this ad-hoc, but we _could_ spend some dedicated cycles ensuring that rOpenSci not only has the best technical and maintenance standards — which it _most...

Finally build out the Security CRAN Task View

4

I started a repo but time is an enemy. A cpl of days in the Evergreen City could end up. @davidski had a stellar idea to use rOpenSci Unconf 2018...

Right now none of the lower level system requirements are identified or added to the BOM. We should likely do that, mebbe with help from the {sysreqs} pkg?

The standard supports dependency trees being embedded in the SBOM. We should have an option for that

purls for R things need to be standardized. not for me to decide. mebbe ping rOpenSci folks?

The spec allows for including authors so we should handle that.

CycloneDX wants license strings in certain ways. Must handle this translation.