Could our Apache Fineract mentors please provide some guidance on a couple of the areas we need to improve upon:
QU10 "*The project is open and honest about the quality of its code. Various levels of quality and maturity for various modules are natural and acceptable as long as they are clearly communicated." -* Do you have any other projects you could point to that have strong transparent measures of quality and maturity clearly available We want to follow best practices and adopt similar to display at http://fineract.incubator.apache.org *QU30: The project provides a well-documented channel to report security issues, along with a documented way of responding to them.* Currently we just link to: http://www.apache.org/security/ Are we able to do as other projects at http://www.apache.org/security/projects.html or is a private channel not something we can set up till we're out of incubation. If we can move forwarde, I'd suggest we have a security page on our site, document and fix known vulnerabilities and then provide clear instruction on reporting vulnerabilities to a private channel like secur...@fineract.incubator..apache.org On Wed, Jan 4, 2017 at 12:11 AM, Sander van der Heyden < sandervanderhey...@musonisystem.com> wrote: > Hi Myrle, > > Thanks for doing the first round of this, I've added my name to a lot of > your evaluations and extended a few as well. I've still left a few blank, > as I am not 100% clear on them and would therefore prefer to wait for a few > more opinions on them. > > Thanks, > Sander > > > > Sander van der Heyden > > CTO Musoni Services > > > > > Mobile (NL): +31 (0)6 14239505 > Skype: s.vdheyden > Website: musonisystem.com > Follow us on Twitter! <https://twitter.com/musonimfi> > Postal address: Hillegomstraat 12-14, office 0.09, 1058 LS, Amsterdam, > The Netherlands > > On 3 January 2017 at 12:21, Myrle Krantz <mkra...@mifos.org> wrote: > > > Hi all, > > > > Apache has a project maturity model which can be used to evaluate > readiness > > for graduation. It's a guide rather then a set of requirements, but I > > believe we can use it. I've used it to create a page evaluating *our* > > readiness: > > > > https://cwiki.apache.org/confluence/display/FINERACT/Maturity+Evaluation > > > > The evaluation is not finished. Apache Fineract needs the following from > > you: > > * Evaluate the criteria which I did not evaluate. I've highlighted them > in > > blue. > > * Check the evaluation of the criteria which already have one. If your > > evaluation differs, document your disagreement. If you agree with the > > evaluation, add your committer id. > > * On those criteria in which Apache Fineract still has work to do before > > graduation (highlighted in red), check if you can do that work. I've > left > > at least one low-hanging fruit in there. Who will find it first? > > * If you feel we need to add a criteria, add it, and explain why. > > > > Once we have met all criteria, we should propose ourselves for > graduation. > > > > Looking at our current state, we've made tremendous progress since we > > entered incubation in December 2015, and I'd like us to make the push for > > those last few bits in 2017. I believe that, if we as a community wish > to, > > we can achieve this in the first quarter of this year. > > > > Greets, > > Myrle > > > > > > > > *Myrle Krantz* > > Solutions Architect > > RɅĐɅЯ, The Mifos Initiative > > mkra...@mifos.org | Skype: mkrantz.mifos.org | http://mifos.org > > <http://facebook.com/mifos> <http://www.twitter.com/mifos> > > > -- *Ed Cable* Director of Community Programs, Mifos Initiative edca...@mifos.org | Skype: edcable | Mobile: +1.484.477.8649 <(484)%20477-8649> *Collectively Creating a World of 3 Billion Maries | *http://mifos.org <http://facebook.com/mifos> <http://www.twitter.com/mifos>
