Rick Mouritzen

The `ocsf/ocsf-validator` needs a change to support the new `lint` attribute. I believe the change will be in `ocsf_validator/types.py`, adding a `lint` key to `OcsfAttr`: ```python OcsfAttr = TypedDict( "OcsfAttr",...

I see a couple things: 1. The suppressions use skewer-case instead of snake_case. Perhaps they should be snake_case for consistency. 2. It's not clear to me what check each is...

> I'm not sure exactly where to write this down Is it possible to add this in the metaschema's JSON Schema itself?

These variations are discussed in Appendix 1 of the Observables document: https://github.com/ocsf/ocsf-docs/blob/main/Articles/Defining%20and%20Using%20Observables.md#appendix-1-attribute-paths This basically says variation 1 is what is intended. The documentation for the `observable` object's `name` attribute doesn't...

FYI: @davemcatcisco , @dkolbly, and @query-jeremy. This change adds `category_uid` to the base of each compiled class, as requested by ~Donovan~ _Dave_. The `category_uid` defaults to 0 for undefined or...

Ugh. Yes. This is side effect of the convoluted way different versions of the schema are handled. The entire site is fronted by nginx which proxies the traffic to the...

The `/api` URL has never had a handler -- it has always resulting in a 404. https://schema.ocsf.io/doc/index.html (I'm not saying this is a good idea, just that it's always been...

FYI: This week I started working on this issue. I've started by (finally) re-writing the schema compilation in Python. This is a deep change that required deeply understanding the entire...

OCSF has at least a couple circular references. The other common one is `process` to `parent_process` (also of object type `process`) creating a `parent_process` to `parent_process` direct loop. The suggested...