2025-03-17 Express TC Meeting

[github-actions]

Date/Time

Timezone	Date/Time
America/Los_Angeles	Mon 17-Mar-2025 14:00 (02:00 PM)
America/Denver	Mon 17-Mar-2025 15:00 (03:00 PM)
America/Chicago	Mon 17-Mar-2025 16:00 (04:00 PM)
America/New_York	Mon 17-Mar-2025 17:00 (05:00 PM)
Europe/London	Mon 17-Mar-2025 21:00 (09:00 PM)
Europe/Amsterdam	Mon 17-Mar-2025 22:00 (10:00 PM)
Europe/Moscow	Tue 18-Mar-2025 00:00 (12:00 AM)
Asia/Kolkata	Tue 18-Mar-2025 02:30 (02:30 AM)
Asia/Shanghai	Tue 18-Mar-2025 05:00 (05:00 AM)
Asia/Tokyo	Tue 18-Mar-2025 06:00 (06:00 AM)
Australia/Sydney	Tue 18-Mar-2025 08:00 (08:00 AM)

Or in your local time:

• https://www.timeanddate.com/worldclock/?iso=2025-03-17T21:00:00

Agenda

Extracted from tc agenda labelled issues and pull requests from expressjs/discussions prior to the meeting.

• Time for a bounty program? security-wg#64
• Transfer the Multer package to the express organization on NPM. #337
• Discussion: consolidating a linter within the project #327
• Discussion: Separate or merge the changelogs on the website #305
• Add policy to align engines fields with ci #289
• "Remake" the Official Logo for Express@5 #262
• 📄 update license to CC BY 4.0 expressjs.com#1730
• Add Moderation Policy admin#6
• Socket.dev reports on all our repos security-wg#17

Invited

This meeting is open for anyone who wants to attend. Reminder to follow our Code of Conduct.

@expressjs/express-tc
@expressjs/triagers
@expressjs/security-wg

Links

• Minutes:

Joining the meeting

• link for participants: https://zoom-lfx.platform.linuxfoundation.org/meeting/95266714809?password=f37cff1b-cb3a-4a21-9425-210e4714c72e
• For those who just want to watch: https://www.youtube.com/@expressjs-official

[bjohansebas]

expressjs/.github#8

[UlisesGascon]

Let's also include expressjs/.github#18 (for traction) please

[UlisesGascon]

Also these ones:

• Process to handle security reports security-wg#56
• docs: clarify ownership and times for security reporting .github#15

[jonchurch]

Minutes:

• Bounty Program -- discussed in the Security Working group meeting today, exploring this currently.
  • Jean -- do we intend to have the bounty program for express itself or for the other packages and orgs? We're not sure if we can cleanly scope it down to just express on hackerone.
• Website CC BY 4.0, we are in agreement to update the license
• CoC to .github add Code of Conduct .github#8 -- did @wesleytodd talk to Ben about the emails listed? They are the existing email we have in expressjs/express
• Give feedback to ulises on these two security reporting process PRs https://github.com/expressjs/security-wg/pull/56/files docs: clarify ownership and times for security reporting .github#15