security.metacpan.org/docs at main · CPAN-Security/security.metacpan.org · GitHub

Name		Name	Last commit message	Last commit date
parent directory ..
guides		guides
hearings		hearings
README.md		README.md
charter.md		charter.md
cna-disclosure-policy.md		cna-disclosure-policy.md
cpan-dependency-confusion.md		cpan-dependency-confusion.md
eu-cra-questions.md		eu-cra-questions.md
eu-cra-summary.md		eu-cra-summary.md
focus-areas.md		focus-areas.md
foss-project-lifecycle.md		foss-project-lifecycle.md
glossary.md		glossary.md
pre-release-disclosure.md		pre-release-disclosure.md
readinglist.md		readinglist.md
report.md		report.md
supplychain-sbom.md		supplychain-sbom.md
tooling.md		tooling.md

README.md

layout	title	toc	permalink
page	Documents & Guides	false	/docs/

Documents relevant to the CPAN Security Group.

Instructions and rules

Incident Reporting instructions
Pre-release Disclosure Agreement
Charter ⚠️ DRAFT
Standards of Conduct (TBD)

Guides

CPAN Author's guide ⚠️ DRAFT
CPAN Author's Security Policy guide ⚠️ DRAFT
Risk assessment guide ⚠️ DRAFT

See guides/ for the full list of guides.

Background info

Tech & legislation Reading list ⚠️ DRAFT
Glossary of terms ⚠️ DRAFT
Supply-chain SBOM roles and metadata overview ⚠️ DRAFT

Other

CPAN Dependency Confusion (study)