ZuriHac 2025 - project / collaboration ideas

Gautier (@blackheaven) will attend ZuriHac (possibly a couple other SRT members, not confirmed). This ticket is a bag-of-holding for specific projects or collaboration ideas for ZuriHac. Share/discuss your ideas below and we will make a list here in the issue description. ## Good first issue / beginner friendly - A simple refactor: https://github.com/haskell/security-advisories/issues/253 - Follow up on the OSV "canonical source / how to edit" ask - https://github.com/haskell/security-advisories/issues/252 - Ecosystem library review, i.e. for particular security-related use cases, what libs are there. Can we do a list with commentary? ## Intermediate - Implement the namespaces proposal: https://github.com/haskell/security-advisories/issues/240 - Additional CVSS metrics (temporal) - https://github.com/haskell/security-advisories/issues/226 ## For the brave - Finish the CVSS 4.0 support - https://github.com/haskell/security-advisories/issues/167 - GitHub bot to assist SRT (and contributors) with reviewing advisory PRs - https://github.com/haskell/security-advisories/issues/57 ## Broader ecosystem efforts - SBOM (@MangoIV started something, IIRC) - Renovate (what is the status? write a guide? @ysangkok led the development) - cabal-audit - what is the status? what work can be done?