This was the original proposal made in https://github.com/expressjs/express/pull/5526. In a previous TC meeting we agreed to move the Threat Model to the Security Working repository in order to iterate over it in the following weeks (as part of #6).
Once the Theat Model is stable, we will relocate the final version in the Express repo or in the meta repo .github.
This was the original proposal made in https://github.com/expressjs/express/pull/5526. In a previous TC meeting we agreed to move the Threat Model to the Security Working repository in order to iterate over it in the following weeks (as part of #6).
Once the Theat Model is stable, we will relocate the final version in the Express repo or in the meta repo
.github.