The Python Security Response Team membership is now public with a documented nomination process 馃コ
The Python Security Response Team membership is now public with a documented nomination process 馃コ
What this means concretely is that if you are interested in contributing to the security of Python, either as a volunteer or through your employer, there is now a documented method to join the PSRT and begin contributing. You can contact any of the existing PSRT members listed here to get started with the nomination process.
@sethmlarson oh cool now I can brag
@sethmlarson "transparency!" I say, as I show off my shiny new "Member: PRST" medal that I'm wearing for some reason 馃槈
@hugovk @sethmlarson LOL. LMAO, even.
@glyph 馃挭! in all seriousness: security work should be celebrated just like more visible contributions like commits, issues, etc. I want to make sure people are credited even on CVE records for the role they play in keeping Python users safe.
@sethmlarson even though my contributions have been very minimal in the past couple of years, I honestly do believe that even folks like me deserve credit for this kind of stuff, volunteering time to be available and helping out. I am really happy with the new governance, the removal of unresponsive or emeritus members, etc. More parts of projects should have pages like this and people SHOULD brag when they participate, to encourage others to take on a little bit of the load as well