OpenJS Foundation

JavaScript is the most widely used programming language and has helped transform the web from static to interactive and dynamic applications with the help of libraries such as Jquery. While JavaScript is traditionally used in browsers, projects like Node.js make it possible to use it on the server side as well, where it is used to develop real-time applications that enable high levels of performance. This makes it the first choice for high-traffic websites.

This project aims to increase the security and reliability of the JavaScript ecosystem at large. Because of JavaScript’s universal design and usefulness, projects that would be positively affected by this work can be found across sectors, fields, and regions. Some examples:

• Wikimedia has been using OpenJS JavaScript technologies at scale to support security, performance and localization, ensuring updates are visually cohesive and readable for all languages, making Wikipedia the most translated piece of literature in the world.
• OpenJS projects are supporting the conservation efforts of large Transfrontier Conservation Areas in southern Africa through the work of the Peace Parks Foundation, and using JavaScript technologies to fight poachers and save rhinos.
• Banking and finance companies use OpenJS projects to deliver everything from consumer banking to core aspects of their technology infrastructure.

The relevance of JavaScript can also be traced to the administrative and economical level in Germany and the EU:

• The German Platform Industrie 4.0 has identified Node.js as key for the web technology layer for applications in the context of digitalization of industry.
• Europeana has developed a Node.js module for the Europeana API. Europeana empowers the cultural heritage sector in its digital transformation.
• The EU-funded SELFY project aims to address continuous assessments of the robustness and resilience of CCAM-enabled mobility solutions versus cyber-attacks, malfunction, misuse, or system failure of the systems in use. It has identified Node.js as a key technology component for their project work.

While these technologies are widely used and relied upon, by comparison there is far fewer people contributing back to these core projects. This investment aims to build a sustainable and scalable infrastructure that these contributors rely own to mantain and test these critical technologies as well as enhance their security.

STF is investing in

1. A single scalable continuous build, test and deployment infrastructure solution to deploy across all OpenJS Foundation-hosted projects, to shift the burden of securing and maintaining infrastructure support for OpenJS projects.
2. Improving the security of several of OpenJS Foundation-hosted projects, by supporting a Security Engineering Champion who will supplement and build from the Node.js and jQuery security working group initiatives to scale across the most critical projects. The program would also advance security skills and processes among the contributor and implementer communities to strengthen the JavaScript ecosystem broadly, through audits, education, and implementation of best practices.
3. Some of the OpenJS-hosted projects have reached the end of their own open source lifecycle and have become inactive. Through an infrastructure inventory and assessment, OpenJS will work with maintainers to implement a deliberate plan to sunset projects by moving to Emeritus Stage and producing required documentation.