ossf
[feedback] Improve maintainer experience in achieving OSPS and Best Practices Badging
tl;dr
OSPS contains the mapping to the BPB criteria, but doesnt provide the specific link or translate between the BPB criteria code to the BPB criteria titling (which uses tags to link, and appear to be misaligned). This increases the burden on maintainers in understanding how to do both.
Details
It is not readily apparent which specific BPB area the OSPS criteria addresses without looking at the crosswalk matrix. This is a few clicks too many for project maintainers trying to do both. What could we do to improve this? would linking to the tag help? (assuming the tags drop you in the right spot, the interact one (B-B-3) which maps to GV-02, GV-03, and DO-02 doesn't drop you in the right spot on the BPB page)
UX
Maintainers in scope for achieving BPB Passing criteria (which many LF projects need to do) are being asked to also do OSPS. These are two frameworks with some overlap but not 1for1. This means they need to check two places to compare if the one thing they did do meets both or only one. It could introduce inconsistencies for projects that divide and conquer expressing both of these were one maintainer is focused on OSPS and provides more detail and specifics than what is provided to the BPB.
Desire outcome
We need to make the dead simple and easy. Projects can't bounce between badging/criteria. they barely have enough time to keep up with their regular work. Given the LF's current focus to push OSPS out to all foundation projects, we need to prioritize this UX that allows maintainers to get approach this in a phased approach or a superset that allows them to express OSPS and BPB at the same time (even if one is still inflight)
