tac
tac copied to clipboard
Make getting/staying involved in TIs easier
Several TIs have reported much lower participation than usual lately. While there are many external factors that are affecting participation at the moment, there's a general sense that there are several barriers to a sustained level of participation in TIs:
- The barrier to entry: There are a lot of TIs, meetings and resources to choose from, which is great! But it also makes prioritization more daunting for newcomers especially, and sustained participation difficult because it's challenging to keep up with everything that's going on.
- Time/resource constraints: As priorities shift, many long-time and new participants don't always have the capacity to engage heavily. This also places a heavier burden on the smaller number of contributors who are able to prioritize a particular TI. So there need to be more options to engage and contribute in smaller ways, and more clarity around how/which small-scoped contributions might actually help TIs.
- Consumption or adoption of TI outputs: Many TIs aren't designed or scoped to allow for more incremental adoption, which would enable consumers of OpenSSF/adjacent technologies and frameworks to make steady progress towards implementing OSS security practices.
Some proposed ways to begin to lower these barriers:
- Complete the TI lifecycle assessment for each TI, including a broader "health check" with support of the GC
- Provide guidance for TIs related to accepting contributions outside of meetings/async and differently-scoped tasks
- Advertising areas where community contributions are needed, including "Good First Issues"
These are comments/thoughts summarizing a discussion on the #tac Slack channel with @sevansdell @steiza @SecurityCRob and @mlieberman85 . Please add anything I might have missed from our original conversation, or any new concerns/ideas not mentioned yet.