[Owasp-leaders] Proposing new guidelines to start code/tool projects

Jim Manico jim.manico at owasp.org
Fri Aug 22 02:34:15 UTC 2014

I think these are both fair ideas to help limit "dump and die" projects.

1) I tend to want to set the bar higher for entry (the whiteboard) ...

2) But I respect your wish to make the bar for entry lower and that seems
to be more inline with OWASP culture. And I admit that "the whiteboard"
will add a new layer of process that will make life a little more

Jim Manico
(808) 652-3805

On Aug 21, 2014, at 9:20 PM, Gregory Disney <gregory.disney at owasp.org>

Repost from Kait, because she keeps getting kicked off the leaders list.
I brought this up with Johanna earlier today in regards to what should be
done with new projects.

It's my opinion that requiring new projects to have source code written
before they can become a project will alienate would be project leaders.
For many new projects, when they submit their project they have an outline
of the project and a roadmap. This is especially true for documentation
projects, which may not have a draft yet at the time they apply.

I propose instead that we continue to approve projects that have a flesh
out project outline and require that they have progress on the project
within 90 days. After 90 days, these new projects should be reviewed for
progress. This doesn't have to be an in-depth review, more of a check in
with the project leader to see if their repository is posted, if they have
source code, or a draft in cases of documentation projects.
If after 90 days, there has been no progress on the project, those project
should be considered inactive.

By making progress a requirement in the first 90 days, we can avoid the
problem we have now, which is that several projects that enjoy active
project status while having never produced anything for the project.

Please let me know what you think.

On Thu, Aug 21, 2014 at 7:14 PM, Jonathan Marcil <jonathan.marcil at owasp.org>

> Oh I see, if you want to add another step in the new project adoption
> life cycle.. well go ahead!
> Also, if there's no time limit, you'll kill that special motivation of a
> urge to deliver something. For some people it may actually help motivate
> them to release. Others will release anyways. Pressure can be good. It
> can be another period than one year.. maybe 6 months I don't know.
> All that said, I hope you don't plan to move everything to whiteboard by
> default.. As a project starter, I kind of accepted the rule of "one year
> or the project is out of incubator" and would not like the rules to
> change in the middle or having to adhere to another process I won't need
> in 2 months. Good news about that is that if you apply the one year
> timeout of the initial agreement, you'll be free of "dead" incubator
> projects within one year anyways.
> Thanks!
> - Jonathan
> On 2014-08-21 21:52, johanna curiel curiel wrote:
> > Jonathan and leaders
> >
> > I would love to allow idea-projects hang for a year but what I have seen
> > after reviewing this for almost 2 years, that the project leader looses
> > pressure to create something in that period and many projects in the end
> > die like this.
> >
> > If we allow idea-projects hang for a year, the amount of work becomes
> > quite big with all the projects that must be reviewed and managed. This
> > process has failed twice, with the Global Committee and the technical
> > advisory board. Setting the bar higher challenges project leaders to
> > really work on it and not let it hang for a year, in the meanwhile,
> > people (potential users) of your project, visit the wiki and  get
> > disappointed to see anything on it.
> >
> > The idea of the Whiteboard, can allow future project leaders to set this
> > as an idea-project and get contributors, but the expectations are
> > different, especially for potential users. They know that this is just
> > an idea and the project hasn't developed yet. When you are ready to take
> > it to the next step, then it becomes a tangible project , and once done
> > that, then the real work begins to keep the project alive and kicking,
> > but thats much easier to monitor than communicating through email every
> > time to see if the project is alive and in the meanwhile the wiki page
> > is outdated and no code has been produced. It damages OWASP reputation.
> >
> > We need to develop and design a 'Startup' like program where we provide
> > training to potential project leaders how to make that idea a
> > prototype.Just like with 'Accelerators' . Since we work globally, I
> > think this should be available online (through courser for example) and
> > have this programs twice a year for example.
> >
> > regards
> >
> > Johanna
> >
> >
> >
> >
> > On Thu, Aug 21, 2014 at 9:30 PM, Jim Manico <jim.manico at owasp.org
> > <mailto:jim.manico at owasp.org>> wrote:
> >
> >     > Last but not least, thank you a lot for your efforts Johanna, you
> are
> >     keeping the main backbone of OWASP healthy and not anyone has the
> >     courage and toughness to do so.
> >
> >     +1000
> >
> >     More positive work and progress around projects bas been done in the
> >     last few months than several years past. We are very lucky to have
> >     your "extreme volunteerism", Johanna.
> >
> >     PS: +1 On the sandbox idea. Perhaps call it "the whiteboard" instead
> >     of "sandbox" to denote an "IT centric idea"
> >
> >     Aloha,
> >     --
> >     Jim Manico
> >     @Manicode
> >     (808) 652-3805 <tel:%28808%29%20652-3805>
> >
> >     > On Aug 21, 2014, at 8:23 PM, Jonathan Marcil
> >     <jonathan.marcil at owasp.org <mailto:jonathan.marcil at owasp.org>>
> wrote:
> >     >
> >     > Last but not least, thank you a lot for your efforts Johanna, you
> are
> >     > keeping the main backbone of OWASP healthy and not anyone has the
> >     > courage and toughness to do so.
> >
> >
> _______________________________________________
> OWASP-Leaders mailing list
> OWASP-Leaders at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-leaders
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/owasp-leaders/attachments/20140821/129e7cb2/attachment.html>

More information about the OWASP-Leaders mailing list