Table of Contents

PMC Meeting: September 19, 2023

Attending: Oliver Goldschmidt, Leila Gonzales, Chris Hallberg, Demian Katz, Josef Moravec, Peter Murray, Mohan Raj Pradhan

Apologies: André Lahmann

1. Review of Action Items from Previous Meeting

2. Goal Review

2023 Goals:

3. Documentation

Koha wiki page development/testing is still ongoing.

Discussion point: Updating of older pages has slowed down but is not entirely complete. How do we define “done” for our documentation improvement project? (No opinions expressed this month).

Work is still pending on MeSH, DoAJ, PubMed Central and NepJol “open data sources” pages. Mohan also plans to contribute documentation related to integrating SubjectsPlus (which recently had example XSLT import configs added to the project) and Moodle (which is still being researched).

4. Translation Platform

Demian and André made significant progress on Lokalise integration during WOLFcon; there are currently some pending pull requests to put the finishing touches on the project.

Demian wants to get this done as soon as possible in order to allow at least a month for translation work on the new release; time is running a bit low.

Proposal: October 30 release date for 9.1, send out manual translation requests if Lokalise is not ready by next week. (No objections).

5. WOLFcon 2023 Outcomes

WOLFcon ran smoothly, with good participation both in-person and online.

Next year's location is not yet known. The ongoing availability of free online participation will likely depend on the capabilities of the venue. We may need to decide on a year-by-year basis whether or not to incorporate the Summit into WOLFcon or hold it online during adjacent dates.

All video editing is complete.

6. Security Audit

Audit results were announced at WOLFcon and most issues have been resolved.

Administrators of known installations with incomplete security configurations were notified by email.

It may be worth opening JIRA tickets to capture any remaining issues (e.g. brute force protection for Database authentication method; Javascript prototype pollution).

Josef felt opening tickets was worthwhile. Demian will review the audit and open tickets. Chris will study up on prototype pollution.

7. Fundraising

We have our first backer – Iowa City Public Library. We'll need to figure out how best to fulfill the “backer newsletter” and “backer PMC meeting” benefits now that we have an organization eligible to receive them (though ICPL does not seem greatly concerned about receiving these benefits immediately, so we have time to plan).

Initial backer newsletter: personalized link to community newsletter sent directly to backers, with note that suggestions are welcome.

For backer meeting: plan closer to next Summit, when more details are known.

Several ideas emerged from the WOLFcon fundraising session. We should consider whether to implement any of them (e.g. crowdfunding, including a “current funding level” meter on the site, sharing specific funding goals, a Wikipedia-style banner on the website, etc.).

8. EU Cyber Resilience Act

Although unable to attend this month's meeting, André raised concerns about the EU Cyber Resilience Act, a European law currently being drafted which has good intentions but may impose negative side effects on open source communities. He shared the Eclipse Foundation's Open Letter to the European Commission on the Cyber Resilience Act and the Apache Foundation's "Save Open Source" article for context.

Josef is aware of this; Moravian is analyzing it.

Peter raised the strategic point that it would help to analyze what can be done collectively and what applies to each provider. Peter will raise this at the Thursday OLF roundtable meeting.

We should continue to monitor the news on this as the situation develops.

9. Possible Future Actions

Some other possible items for the future:

Other Items

Josef and Robert were unable to attend the September Community Call due to scheduling issues. Josef will make the connection between Robert and Chris for theme development.

Action Items