Considering the Open Source Project Security Baseline

[tholewis]

Momentum is building around the Security Baseline. Security baseline is designed to act as a minimum definition of requirements for a project relative to its maturity level in categories such as Access Control, Build and Release, Documentation, Quality and Legal. The long-term goal is to establish the baseline as a standard across all Linux Foundation projects, covering thousands of repositories.

Would this be something to consider for all of our Open Source projects within the GSF? Or would it be too early? Since security is such an important consideration, was interested to see if folks see this as valuable or if this kind of work is already happening within the GSF Open Source projects.