Documents & Guides

Documents relevant to the CPAN Security Group.

Instructions

• Incident Reporting instructions
• Pre-release Disclosure Agreement

Guides

• CPAN Author’s Secure Coding Guide ⚠️ DRAFT
• CPAN Author’s Guide to Random Data for Security
• CPAN Author’s Security Policy guide

See guides/ for the full list of guides.

Studies

• CPAN Dependency Confusion study
• Supply-chain SBOM roles and metadata overview ⚠️ DRAFT

Consultations and hearings

See the consultations/ folder for CPANSec’s replies to public consultations and hearings.

Rules and bylaws

• Charter ⚠️ DRAFT
• Standards of Conduct (TBD)

Other background info

• Tech & legislation Reading list ⚠️ DRAFT
• Glossary of terms ⚠️ DRAFT