Steering Committee 20220913 Minutes

Attendees: Yan, Tim, Mike, Jennifer, Lisa, Andy Regrets: Jon, Rebecca Minutes: Jennifer

November Release Update: Andy: Reports the issue with their local environment has been fixed; waiting on pullrequest; expect to be ready for November release

Mike: On track for November release; currently working to make sure there are no conflicts with available PHP updates; no issues expected; jQuery update for remaining modules will begin early next month; will submit pullrequest when ready

Testing: Yan reminded the group that developers from NCSU and ECU have volunteered and are available to assist with testing when changes are submitted.

For New Developers: Mike has been working on a minimal docker configuration to allow creation of an immediate instance from the developer environment;

• Development streamlining tool for testing
• Automates all server construction pieces for running locally to assist with dev testing
• Not inclined to include directly in the repository
• Will require some local modification; (ex: password changes);
• Mike will put together notes on github with instructions
• Discuss how we might want to share and incorporate with materials for new developers
• Not critical to November release going out

Anticipated release of docker for early users: First half of October Mike will demo at October steering committee meeting Demo could be recording for sharing with potential new developers

November Goal: We will have a new release and a docker for development testing

Documentation and Tutorial Project: Rebecca is leading this effort Vimeo Account is now established (thanks to Yan & NCSU)

Next Steps:

• Video creation
• Look at list of feedback suggestions
• Expect list of video content needs to be shared to ask for volunteers
• Jennifer will categorize current list and update steering committee

Security Update: Andy: Confirmed vulnerable code is not on production and alerts have been dismissed in github – not an ongoing concern Response from Andy’s system security contact: "I checked the dependabot alerts and all the packages are dev dependencies that are used during running the unit tests. I checked the installation instructions and reviewed a production installation to confirm that those packages are not present on production systems. Action taken: alerts dismissed on github with this explanation as the vulnerable code isn't used as part of the Coral system." Reviewed dependabot alerts during meeting Confirmed one known open issue – about JQuery

Non-Profit Discussion:

• Tim previously shared link with benefits associated with becoming a non-profit: https://www.google.com/nonprofits/
• Would require setting up as a 501c3
• Mike commented on serious effort required to establish a non-profit organization and suggested another option may be joining a non-profit “umbrella” organization that also comes with serious commitment
• Suggestion to look into other organizations and options for an umbrella organization that would be a good fit for CORAL; each would typically provide a prospectus about what they could do and what costs would be
• Table decision for now – continue to investigate options
• Lisa suggested it would be good to see how this fits into goals of organization