ossf / wg-securing-critical-projects

Helping allocate resources to secure the critical open source projects we all depend on.
Apache License 2.0
318 stars 34 forks source link

What does the "apache" in the critical projects list mean? #62

Open fredgan opened 1 year ago

fredgan commented 1 year ago

Hi, I have a question.

In the Critical Projects List

No.88,

Apache https://github.com/apache Survey Response

What does this mean?

Are all the projects under apache critical projects? But httpcomponents - client & httpcomponents - core(No.28 & No.29) and some other apache project are listed above this.

Or there is some mistake in this line?

zmanion commented 9 months ago

I had the same question, the current list does not include an unqualified "Apache" so I think this is resolved. ASF has 2.5K repositories :)