The first issue is not really with p.a.o, but with Whimsy: In https://whimsy.apache.org/public/committee-info.json, the webpages are listed as http:// instead of https:// (or unqualified), which causes them to be imported into projects.apache.org with the insecure link.... with no way for the PMC to override this to ensure their site uses https:// there.
I can manually update projects.apache.org by modifying files in https://svn.apache.org/repos/asf/comdev/projects.apache.org/trunk/site/json/foundation/ (especially committees.json), but I'm pretty sure a cron job will undo the changes. Suggested fix: use the value of the committee's RDF in data/committees/<pmc>.rdf file's <foaf:homepage/> field's "rdf:resource" attribute instead. Alternatively, just use https:// everywhere by default. The second issue is that repositories.json is out of date: There does not appear to be any cron scripts or README explaining how this file is updated. It doesn't appear to be updated at all, since repositories which don't exist in https://git.apache.org are still listed here (incubator repos which have graduated are notable ones). Also, nothing from https://gitbox.apache.org/repos/asf is listed in this file, even though they should be. Suggested fix: have a cron job regularly scrape both https://git.apache.org and https://gitbox.apache.org/repos/asf to update repositories.json Thanks, Christopher