Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

engagements/2023/jquery/README.md: Unclear purpose (introduction) #353

Open
Chealer opened this issue Apr 2, 2024 · 2 comments
Open

engagements/2023/jquery/README.md: Unclear purpose (introduction) #353

Chealer opened this issue Apr 2, 2024 · 2 comments

Comments

@Chealer
Copy link

Chealer commented Apr 2, 2024

The README file about the jQuery engagement starts with an introduction:

The purpose of this Alpha engagement is to provide security resources to the jQuery project in key areas, including:

  • Secure the consumer web
  • Reduce potential security incidents for jQuery by modernizing its consumers and its code
  • Conduct an ecosystem security risk audit
  • Modernize infrastructure
  • Web Modernization Campaign

Please clarify what the following fragments mean:

  1. "the consumer web"
  2. "its consumers"
  3. "Conduct an ecosystem security risk audit"
  4. "Web Modernization Campaign"
By the way There is a typo ("Janurary") in the first item of the _Monthly Updates_ section.
@hyandell hyandell mentioned this issue Jul 9, 2024
@hyandell
Copy link
Collaborator

hyandell commented Jul 9, 2024

On the ask for more information here, this is content from the OpenJS Foundation (jQuery) and we should follow up with them for clarity if available.

My belief of each item is:

@Chealer
Copy link
Author

Chealer commented Jul 14, 2024

Thank you @hyandell
If you're correct about #1, this should be phrased much more precisely.
Regarding #3 and #4, you are visibly right, but it is very hard to guess that. Either the labels should be more precise, or they should link to details.
For #3, it should be clarified which ecosystem is referred to.
For #4, even the details are quite unclear (what does reducing "the footprint of legacy jQuery code" mean?).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants