Project Working Group

The Project Committee is responsible for the Project Promotion Process, which allows projects to progress through the maturity lifecycle.

Requesting Promotion

As a project leader you can request a promotion to the next level via the official Project Promotion Application form.

Please do not use the previously offered Google form any more, as this is not monitored and might lead to lost requests.

Please expect a review time of 4-8 weeks! If this timespan is significantly exceeded, please feel free to ask for an update via the Project Committee email or Slack channel!

Maturity Levels

Requirements a project must meet at each maturity level:

Incubator

• Activity: no requirement

• Documentation: Project website exists and describes project's intent and purpose

• Support: no requirement

• Contributions: no requirement

• Usage: no requirement

• Age: no requirement

• OWASP Project Good Practice: Known and considered

• OSSF Best Practices: no requirement

Lab

• Activity: ≥1 major release

• Documentation: Reasonable instructions for installation, usage or implementation exist

• Support: Slack channel or other support queue exists; GitHub issues are taken care of in due time

• Contributions: Contribution guidelines exist; Contributions (e.g. Pull Requests) are handled in due time

• Usage: no requirement

• Age: 3-6 months

• OWASP Project Good Practice: Mostly taken into account

• OSSF Best Practices: Project registered and self-certification started

Production

• Activity: ≥1 major release per year and regular minor/patch releases

• Documentation: Fully scoped usage documentation, Contribution guidelines etc. exist

• Support: Slack channel or other support queue are monitored and managed; GitHub issues are properly managed and worked on

• Contributions: Contributor onboarding is managed properly; Project participated in ≥1 GSoC, OWASP Project Summit or similar event; PRs are monitored and managed

• Usage: Evidence of significant use, e.g. via GitHub, DockerHub, SourceForge statistics

• Age: >1 year

• OWASP Project Good Practice: Fully taken into account

• OSSF Best Practices: Criteria for at least passing level badge fulfilled

Promotion Process

Maturity Promotion

Promotions from Incubator to Lab level are reviewed by at least one Project Committee member and one volunteer project leader or a second Project Committee member. The final decision is with the Project Committee.

Promotions from Lab to Production level are reviewed by at least one Project Committee member and one volunteer project leader or a second Project Committee member. The final decision is with the Project Committee.

Strategic Promotion

Please note that promotions to Flagship level are not a maturity progression from Production but reserved for projects of strategic importance to OWASP and its mission. Requests to promotion to Flagship will be evaluated by the Project Committee and a recommendation brought to the OWASP Global Board. The final decision is with the Board.