2024-03-04 Express TC Meeting

[github-actions]

Date/Time

Timezone	Date/Time
America/Los_Angeles	Mon 04-Mar-2024 13:00 (01:00 PM)
America/Denver	Mon 04-Mar-2024 14:00 (02:00 PM)
America/Chicago	Mon 04-Mar-2024 15:00 (03:00 PM)
America/New_York	Mon 04-Mar-2024 16:00 (04:00 PM)
Europe/London	Mon 04-Mar-2024 21:00 (09:00 PM)
Europe/Amsterdam	Mon 04-Mar-2024 22:00 (10:00 PM)
Europe/Moscow	Tue 05-Mar-2024 00:00 (12:00 AM)
Asia/Kolkata	Tue 05-Mar-2024 02:30 (02:30 AM)
Asia/Shanghai	Tue 05-Mar-2024 05:00 (05:00 AM)
Asia/Tokyo	Tue 05-Mar-2024 06:00 (06:00 AM)
Australia/Sydney	Tue 05-Mar-2024 08:00 (08:00 AM)

Or in your local time:

• https://www.timeanddate.com/worldclock/?iso=2024-03-04T21:00:00

Agenda

Extracted from top priority labelled issues and pull requests from expressjs/discussions prior to the meeting.

• EFI: Express LTS Strategy #196
• Recurring TC Meeting #195
• Express Forward Initiative  #167
• Formation of a Security Working Group #165
• express 5.0.0 #100
• Support http/2. express#3730
• Release 5.0 express#2237
• Typescript Typings pillarjs/router#48

Invited

@expressjs/express-tc

Links

• Minutes: 2024-03-04 Express TC Meeting #208 (comment)
• Recording: https://youtu.be/gojW4byXIog

Joining the meeting

• link for participants: Zoom Link
• For those who just want to watch: TBD

[UlisesGascon]

Some items in the agenda were duplicated, so I made a manual clean up. Should be check the automation tool that generates the list?

[sheplu]

I would add two points

• are we good with this PR to cleanup all the orgs / repositories Repositories overview and actions admin#1
• Node.js supported version for express 5 LTS support definition admin#3

[UlisesGascon]

I would love to talk about Express releases too (for reference: expressjs/express#5513) not just process documentation 🙂

[jdhiro]

Love to see these notes, thank you for sharing! I spent many years as a W3C standards contributor at Microsoft, and I currently run an org building many apps on Express. Would be happy to help if you're growing the TC.

[wesleytodd]

Added the zoom link: https://zoom-lfx.platform.linuxfoundation.org/meeting/95266714809?password=f37cff1b-cb3a-4a21-9425-210e4714c72e

Sorry for the delay getting this all sorted. We will get better at this going forward.

[wesleytodd]

@jdhiro You are always welcome to join. These meetings, while primary for the TC are open to everyone from the project/community. Especially for folks interested in becoming more involved!

[jonchurch]

Gist link to the minutes

Raw content of minutes:

2024-03-04 Express TC Meeting Minutes

attendance: Wes Todd, Blake Embrey, Rand Mckinney, Jean Burellier, Ulises Gascon, Jon Church

Agenda:

Github Issue (Agenda)

Agenda items are currently pulled from issues tagged top-priority in the Discussions repo

Announcements

• 4.18.3 released less than a week ago, has over 2 Million downloads so far.

Recurring Meeting cadence

#195

• There was has been discussion about the cadence being changed, and the attendance policy.
• Jonchurch brought up whether or not the existing TC is okay with the cadence and expectations, as it is a change from the less often meetings before.

Discussion:

• Is the expectation that the full TC attends every meeting?
• Rand agrees that its fair to have an inactivity policy, so long as it is not draconian.
• We don't need to lock on an inactivity policy right now, as we don't really intend to kick people out in the near term for being inactive while we are still figuring out cadence

Express LTS Strategy

#196

• Jean says releasing Express v5 should be a prio
  • What Node version do we want to support?
    • Today v5 is Node v4 minimum supported
    • Here is the Migration guide currently on the website for express 5 https://expressjs.com/en/guide/migrating-5.html
    • There is an Express LTS issue with discussion about an LTS strategy EFI: Express LTS Strategy #196
    • Wes sees v5 as a stepping stone, and suggests that we write an LTS policy doc, include that v5 is a unique case.
    • jean suggests using v14 as the lowest support level for v5
    • Ulisses, how long do we want to support v4?
      • He would like to see it supported for years to come
      • Wes says he'd like to see "no less than a year, ideally 2 years", talking about security patches.
      • Jean says, 1 year of maintenance, 2 years of security updates
      • Ulises says maybe consider sponsorship from companies who require longer support for security

Decision:

• Support Node 14 for Express 5
• Jean will open a PR with the LTS strategy discussed

Github Project

Wes created a Github Project to try out using it as a means to track work happening.

Security Update

• OpenJS Foundation has offered a Security Audit, the kickoff meeting happened already
• There are a lot of questions about what working with them entails, and they are flexible to work how the team wants to
• Wes suggests handing it off to the Security Working Group
• Security WG was created in Formation of a Security Working Group #165
• There will be a public part, streamed meetings. And a private component for WG members, so reports can be triaged in private before a fix is released.

Decision:

• Hand off the Audit to the Security WG.

Misc

Rand before he had to leave brought up that there is a lot of Documentation work which needs to be done. We're hoping to leverage the community to swarm on docs, once we know what needs to happen.

[jonchurch]

Action items agreed to include @sheplu opening a PR with LTS policy doc

@wesleytodd are you planning to upload the recording manually to youtube? We can close this issue once we do that.

[wesleytodd]

Yes, and I will post a link and close this when I do.

[jonchurch]

@UlisesGascon do you have a link you can share to the spreadsheet you mentioned during the meeting?

[UlisesGascon]

@UlisesGascon do you have a link you can share to the spreadsheet you mentioned during the meeting?

Yep, this one.

I was also thinking that maybe we can land the meeting minutes as a markdown file in this repo? Example from Node.js TSC, it will give us the opportunity to better index, and also to modify the notes if needed with a PR :)

[wesleytodd]

Recording: https://youtu.be/gojW4byXIog