In the last week of 2020, Grid eXchange Fabric (GXF), a software platform that enables hardware monitoring and control in the public space, is proud to announce they achieved the CII Best Practices Badge! Security and software quality are of great importance to GXF, as gaining this badge clearly shows.
The Linux Foundation (LF) Core Infrastructure Initiative (CII) Best Practices badge is a way for Free/Libre and Open Source Software (FLOSS) projects to show that they follow best practices (credit: https://bestpractices.coreinfrastructure.org/en). These best practices are based on practices of well-run OSS projects, increase the likelihood of better quality and security, and can be applied to any OSS project.
The best practices focus on multiple areas of Open Source Software Projects:
- Change control, for example: does the project have a Public version-control source repository?
- Reporting, for example: does the project have a bug-reporting process?
- Quality, for example: does the project have an automated test suite?
- Security, for example: does the project use basic good cryptographic practices?
- Analysis, for example: does the project use code analysis?
Projects can voluntarily self-certify, at no cost, by using the web application provided by the CII to explain how they follow each best practice.
For more detailed information on GXF’s CII Best Practices Badge, please see: https://bestpractices.coreinfrastructure.org/en/projects?q=gxf
For a more extensive introduction of the CII Best Practices Badge, please see the introduction video by David A. Wheeler at https://youtu.be/JMptmhV06j8.
