JavaScript touches nearly every part of the web today, and maintainers at OpenJS Foundation-hosted projects are working tirelessly to keep critical infrastructure secure. The Cross Project Council seeks to leverage its better together approach by sharing best practices, guidance, and support among OpenJS and other JS projects in the ecosystem.
Together, we hope to reduce the risk and take ambitious security goals for all our OpenJS projects. We will further define, document, communicate, and measure in an open and transparent way.
Desired outcomes include:
The purpose of this repository is to provide a central place for coordination and documentation around security best practices and resources for the JavaScript community and beyond.
Interested parties can also join our #security channel on Slack.