Repository navigation
Conversation
- Name the project "Apache Caldera (Incubating)" in the heading and first reference, as the Incubator branding guide requires - Add the incubation disclaimer with a link to the DISCLAIMER file - Point vulnerability reports to the ASF security process; the link to SECURITY.md was dead since that file was removed in #3387 - Remove the Benefactor Program section, which referred readers to a MITRE contact Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The README disclaimer should match the canonical DISCLAIMER text exactly.
1 open finding
What changed in this PR
Updates README branding and governance information for Apache Incubator compliance.
Changes:
- Renames the project to Apache Caldera (Incubating).
- Updates vulnerability-reporting guidance.
- Replaces the Benefactor Program with an incubation disclaimer.
| File | Description |
|---|---|
| README.md | Updates branding, security guidance, and incubation notice. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| ## Disclaimer | ||
|
|
||
| If you are interested in partnering to support, sustain, and evolve MITRE Caldera™'s open source capabilities, please contact us at caldera@mitre.org. | ||
| Apache Caldera (Incubating) is an effort undergoing incubation at The Apache Software Foundation (ASF), sponsored by the Apache Incubator. Incubation is required of all newly accepted projects until a further review indicates that the infrastructure, communications, and decision making process have stabilized in a manner consistent with other successful ASF projects. While incubation status is not necessarily a reflection of the completeness or stability of the code, it does indicate that the project has yet to be fully endorsed by the ASF. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this changes
SECURITY.mdhas been dead since that file was removed in Delete SECURITY.md #3387.Why
The Incubator branding guide says the README of each repository MUST name the podling as Apache Podling-Name and state that it is incubating. The current README does neither.
Not in this PR
mitre/*, which is where the plugins live today.CITATION.cffand therepositoryfield inpackage.jsonstill reference MITRE.🤖 Generated with Claude Code