Skip to main content

Open Source Maintainers Meeting 2023-02-23

  • recording: Link
  • Github issue: #48
  • Minutes Google Doc: Link

Present​

Use github alias

  • Admins team: @onebeyond/admins
  • Maintainers team: @onebeyond/maintainers
  • Ulises Gascon: @ulisesGascon

Announcements​

We have a new website for maintainers! see

Agenda​

Repo template as baseline​

  • See #1
  • IΓ±igo has implemented new templates for Issues and PRs, but it will require some extra work to make it work as organization template (templates location)

Repos with NPM version mismatch​

Missing NPM Package publication permissions​

  • See #28
  • It will be removed from the agenda as it is not a blocker
  • The current repositories will be migrated to the new Npm org

OpenSSF Scorecard implementation​

  • See #41
  • Ulises has created a Github action
  • Next version (potentially next week - as beta) will auto-scope the orgs repos and won't require any effort to maintain it.
  • Once new version is released, Ulises will create a PR with the implementation for One Beyond org in the maintainers repo.
  • It will potentially require some extra PRs to proactively notificate the new scores to the OpenSSF API.

Q&A, Other​

  • Potential plan to Move systemic extension a mono-repo
    • We don’t have a full agreement on the need to move for mono-repo approach in the group
    • We will need to research about this topic to consolidate a proper discussion (changelogs, git history migration, etc...)
  • Github API research
    • IΓ±igo has lead an investigation about the capabilities in the Github Api about to check for configurations in the repos (like branch protection) and seems promising.
    • We have many options on how to deploy the checks (script, github action, npx library...)
  • Continuous integration in the systemic-Azure-bus
    • Betisman confirmed that the tests are depending on a third party infra and they are not available.
    • Action: We need to move this to our own infra (Lead by Bestiman)
    • Additional action: Evaluate how hard will be to get rid of external infra to run the tests in CI (mocking, docker..)

Upcoming Meetings​

  • Same as usual, in two weeks same slot