Nominating Daniel Ruf to the Ecosystem Triage team

[lirantal]

Hi @nodejs/security-wg

I would like to nominate Daniel Ruf (@DanielRuf) to join the Security WG and the Ecosystem Triage team specifically.

Daniel has been a long time activist around software security through meetups and conferences, his open source projects on the matter, and recent security disclosure impacting npm, yarn and pnpm. He is also participating in quite a few open source projects such as verdaccio and gatsby and has a good understanding of the JavaScript ecosystem.

[lirantal]

I would also like to add, with regards to recent conversations about activity within the working group, that I have laid out the expectations with Daniel before opening this about being an active triager within the H1 program and this being the primary focus.

[sam-github]

+1 for more triagers: 🎉

[MarcinHoppe]

👍

[vdeturckheim]

Lgtm!

[DanielRuf]

Hi, thanks for the nomination =)

Is there some update / news regarding this?

[MarcinHoppe]

I think this somehow fell through the cracks. Let me circle back with the team to find an onboarding buddy.

[lirantal]

We have +1's it's just that we didn't have any agenda meetings happening recently and we didn't bring this up to confirm, that's all.

Let's make sure we're on it in the upcoming one and if not I'll ping here again for confirmation so we don't delay. Daniel will be an amazing addition to the team and the vulnerabilities queue is only piling up :-)

[MarcinHoppe]

The next meeting is on Monday, sounds like we should be able to get Daniel's onboarding moving soon?