Philippe Ombredanne

``` Unsupported fixed version type: 'e39f7e156fdaf6fec09a15ea6f4e8fec8cdbf751' for OSV id: 'PYSEC-2023-273' ``` This is a problem.

Add bottlerocket advisories

2

AWS uses Bottlerocket, a Linux distro for containers - https://bottlerocket.dev/ - https://aws.amazon.com/bottlerocket/ - https://github.com/bottlerocket-os Based on: - https://github.com/bottlerocket-os/bottlerocket-project-website/blob/8ed231c2e98619c22db2bbd85d01b558df18eb26/content/en/os/1.34.x/concepts/variants/index.markdown#security-advisories - https://bottlerocket.dev/en/os/1.34.x/concepts/variants/#software-inventory-and-security-advisories > Security Advisories > Bottlerocket publishes security advisories on the...

Following the deployment @ DejaCode we should also adopt altcha here See: - https://github.com/aboutcode-org/django-altcha

See https://www.openssh.com/security.html

## Bug Description I cannot easily copy the email of a contact. I can only click on a link, but I do not want to send an email, just copy...

Replace and rewrite "assert" statements in non-test code

31

See https://www.reddit.com/r/learnpython/comments/zd217y/is_using_assert_considered_good_practice/ > assert statements should only be used for debugging purposes. They are removed when not running in debug mode (i.e. when invoking the Python command with the -O...

Create org-modified unified contributing guide and related coding standards

2

### Description We have many places for this like in: - https://scancodeio.readthedocs.io/en/latest/contributing.html - See https://github.com/search?q=org%3Aaboutcode-org+contributing+language%3AreStructuredText&type=code&l=reStructuredText We need to have a single org-wide document that unifies all these practices with a...

RFC: Bump minimum supported Python version across AboutCode projects?

1

It would be good to have a simple plan to deprecate old Python versions and support new Python versions that would: - track the EOL timeline of Python proper https://devguide.python.org/versions/...

When patching packages, design how to track modifications

1

When a package is modified locally in a codebase, we should be able track these modifications and how to identify them. Why? Because a package may have been: 1. patched...

Select/refine tools to record step-by-step/walk through documentations with screenshots and narrative

2

It is nice and useful to have step-by-step guides in the docs with screenshots. It is like a sort of video, but no sound: just a few images and text....