Leftover references to the HackerOne Node.js Ecosystem program

[achrinza]

As stated by nodejs/node@ce1c536, "The ecosystem security program via HackerOne is no longer a thing."

The following resources in this Git Repository contains references to this program:

• Ecosystem Vulnerability Management
• HackerOne Third-Party Submission Form
• Node.js Ecosystem Triage Guidelines
• Responsible Disclosure Template

[DanielRuf]

Good catch @achrinza. Do you want to provide a PR which removes these sections?

[0xNA]

I must have missed this decision to discontinue H1 program, so are we back to square one? Can someone share some more info on this? ./na

…

On Sat, 19 Mar 2022 at 20:20, Daniel Ruf ***@***.***> wrote: Good catch @achrinza <https://github.com/achrinza>. Do you want to provide a PR which removes these sections? — Reply to this email directly, view it on GitHub <#788 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AFI3Q5PVBTGZ6JZAJ3W6WNDVAYEHHANCNFSM5REE2ECA> . Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- *Nandaa ***@***.*** <http://twitter.com/profnandaa>*

[RafaelGSS]

https://github.com/nodejs/node/blob/main/SECURITY.md

[achrinza]

@0xNA In OpenJSF, the idea of a replacement (ecosystem) programme is being floated around: openjs-foundation/cross-project-council#826 (comment)

Though I'm not aware of any public progress on that front, or if it will only be scoped to OpenJSF projects.