A quick proposal to update the language to reflect GeoServer commit access is granted to individuals (not a group).

Jody Garnett (GeoCat)

2.26

• Under Discussion
• In Progress
• Completed
• Rejected
• Deferred

The recent xv security vulnerability highlighted the difference between an individual participant gaining trust in the open source supply chain rather than a group of individuals operating an alias.

Committing developers guide states:

All contributors are asked to provide an assignment agreement for working on the project:

• corporate_contributor
• individual_contributor

This guidance has good intent, and subsequent text uses the phrase "a developer" to indicate an individual.

Amend the guidance to acknowledge the role of participating organizations while being clear trust is extended to individuals:

All contributors are asked to provide an assignment agreement for working on the project:

• individual_contributor

  Individual contributor agreement.

• corporate_contributor

  Corporate contributor agreement to authorize employees to work on project. May also be used as a software grant to donate software to the project.

GeoServer is grateful that organizations of all shapes and sizes support our project with in-kind participation of their employees. Extending commit access is made to individuals directly based on their expertise demonstrated over time.

No backwards compatibility issues.

• make it clear we are grateful for companies and organizations contributing

Project Steering Committee:

• Alessio Fabiani: +1
• Andrea Aime:
• Ian Turton: +1
• Jody Garnett: +1 (initial motion)
• Jukka Rahkonen:
• Kevin Smith:
• Simone Giannecchini: +1
• Torben Barsballe: +1
• Nuno Oliveira:
• Peter Smythe: +1

• https://osgeo-org.atlassian.net/browse/GEOS-11375