[Esapi-dev] [GPC] Final Purpose/Overview for the ".NET and Java WAF" OWASP Project for GPC

Christian Heinrich christian.heinrich at owasp.org
Wed Aug 24 02:11:36 EDT 2011


Jason,

It is not clear if I will be listed as a "Contributor" as per
agreement reached with Juan i.e.
https://lists.owasp.org/pipermail/esapi-dev/2011-August/001903.html or
not - can you please clarify?

On Wed, Aug 24, 2011 at 2:03 PM, Jason Li <jason.li at owasp.org> wrote:
> Christian,
> Nowhere in my email did I make any reference to the amount of time spent on
> the project by anyone. Given your eagerness to contribute, I would expect
> such contributions would be rapidly forthcoming and numerous. Hence, once
> the source tree setup has been completed, any contributions you make will be
> plainly obvious to all.
> As I said previously, Juan and Jim can speak for themselves if they feel
> differently about the agreed upon structure.
> Until then, I consider the matter closed.
> -Jason
>
> On Tue, Aug 23, 2011 at 11:47 PM, Christian Heinrich
> <christian.heinrich at owasp.org> wrote:
>>
>> Jason,
>>
>> On Wed, Aug 24, 2011 at 12:59 PM, Jason Li <jason.li at owasp.org> wrote:
>> > Christian,
>> > In my personal view, I don't know that setting up an initial repository
>> > as a
>> > notable contribution. We certainly don't recognize Paulo or members of
>> > the
>> > GPC as project contributors for setting up a project page. Similarly, I
>> > don't know that deleting a source folder is a particularly notable
>> > contribution to a project.
>> > Nonetheless, we are both citing information/conversation that isn't
>> > reproduced on this thread, so I suggest we leave the topic to the
>> > parties
>> > you've named. Juan and Jim can certainly speak for themselves without
>> > you or
>> > I putting additional words into their mouths.
>> > Jim had previously stated that he does not wish to be recognized as a
>> > contributor - but if he has changed his mind, he can certainly speak up
>> > for
>> > himself.
>> > Since you are so eager to contribute to the source, I personally don't
>> > really see the urgency to change the agreed upon project listing given
>> > that
>> > your contributions will quickly be obvious. However, if Juan disagrees,
>> > he
>> > can certainly speak up for himself.
>>
>> I have *not* dedicated a "small" amount of time on this project and
>> some of the public correspondance has been published from
>> https://lists.owasp.org/pipermail/esapi-user/2011-March/date.html
>> through till now and its dependency on the WAFEC i.e.
>>
>> http://lists.webappsec.org/pipermail/wasc-wafec_lists.webappsec.org/2011-February/000034.html
>>
>> As far as recognition for the GPC, this is inferred just as it is with
>> ModSecurity.  That stated, I have credited all the people, including
>> Paulo, that have contributed to projects that I have lead in the past
>> e.g. ~46.20 of http://video.google.com/videoplay?docid=5419982525671711780
>> and in this case that would also include Jim.
>>
>>
>> --
>> Regards,
>> Christian Heinrich
>> http://www.owasp.org/index.php/user:cmlh
>
>



-- 
Regards,
Christian Heinrich
http://www.owasp.org/index.php/user:cmlh


More information about the Esapi-dev mailing list