Salve J. Nilsen

> Since the nature of sustainability data being dynamic, [...] @jkowalleck, Could you expand on this point? What do you mean?

> The data might be valid at the time of writing, but may change at any time. > It is a snapshot, isn't it? I mean, projects have a life...

I think that making a minor/patch release of a component with just metadata updates sounds like a completely reasonable thing to do. Please note that I'm talking about the support...

> I'm not clear on what you mean by "what support a project needs" - do you mean like funding? Yes, among other things. I gave a couple examples in...

Just for anyone reading this; > The working group for OSS Sustainability will be kicking off on Thursday August 22nd from 11:00am - 12:00pm U.S. Central (4:00pm - 5:00pm UTC)....

I can confirm this bug for 2.0.5-1 (SailfishOS/Jolla), and it's quite annoying! :-|

My preference (fwiw) would be 1. Make sure context of the page is kept obvious (it's a page listing all modules tagged with a specific tag) 2. Make sure the...

Let's remember that tags are there to increase findability of modules, and that's it. Adding complexity or layers doesn't help with findability, neither does offloading the job to "the community"....

Agreed. Related, I think there is a case for suggesting a standard system installation directory for SBOMs, so they can be found locally. E.g. `/lib/sboms/$packagename.cdx.json`.

Ah, sorry. I'm specifically thinking of the situation *after* the build step (when an SBOM is produced), namely when the artifacts are *installed*. In this case I think accompanying SBOM...