8 Pull requests merged by 5 people

• update core index.json

  #1346 merged Jul 10, 2024

• vuln: add latest security release

  #1345 merged Jul 10, 2024

• Update scorecard monitor version

  #1338 merged Jun 27, 2024

• meta: add more info to stale message

  #1337 merged Jun 25, 2024

• doc: add 2024-06-20 notes

  #1335 merged Jun 20, 2024

• doc: update threat model progress

  #1334 merged Jun 20, 2024

• OpenSSF Scorecard Report Updated

  #1327 merged Jun 20, 2024

• chore(deps-dev): bump braces from 3.0.2 to 3.0.3

  #1331 merged Jun 16, 2024

3 Pull requests opened by 2 people

• chore(deps): bump joi from 13.7.0 to 17.13.3

  #1336 opened Jun 24, 2024

• OpenSSF Scorecard Report Updated

  #1341 opened Jul 4, 2024

• chore(deps): bump inquirer from 7.3.3 to 10.0.0

  #1344 opened Jul 8, 2024

5 Issues closed by 5 people

• spam

  #1342 closed Jul 4, 2024

• Node.js Security team Meeting 2024-07-04

  #1339 closed Jul 4, 2024

• Does .wasm module under --experimental-pemission protect?

  #1168 closed Jul 3, 2024

• Node.js Security team Meeting 2024-06-20

  #1332 closed Jun 20, 2024

• OpenSSF Scorecard Report Updated!

  #1326 closed Jun 20, 2024

3 Issues opened by 3 people

• Security Mailing List

  #1343 opened Jul 7, 2024

• OpenSSF Scorecard Report Updated!

  #1340 opened Jul 4, 2024

• Node.js maintainers: Threat Model

  #1333 opened Jun 20, 2024

7 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• [Bug]：use pm2 and --experimental-permission, throw Error: Access to this API has been restricted

  #1330 commented on Jun 15, 2024 • 0 new comments

• Ping TSC on deps update not from GithubBot

  #1329 commented on Jun 20, 2024 • 0 new comments

• Requirement (Gold level): The project MUST have FLOSS automated test suite(s) that provide at least 80% branch and 90% statement coverage

  #1188 commented on Jul 4, 2024 • 0 new comments

• Requirement (Gold level): Secured delivery against man-in-the-middle (MITM) attacks

  #1190 commented on Jul 6, 2024 • 0 new comments

• Requirement (Gold level): The project MUST include a license and copyright statement in each source file

  #1187 commented on Jul 6, 2024 • 0 new comments

• Requirement (Gold level): Use basic good cryptographic practices

  #1189 commented on Jul 8, 2024 • 0 new comments

• build(deps): bump semver from 7.6.0 to 7.6.2

  #1314 commented on Jun 16, 2024 • 0 new comments