Original discussion: https://github.com/nodejs/security-wg/pull/954/files#r1179649274 @mhdawson @tniessen > The project MUST have at least one primary developer who knows how to design secure software. (See ‘details’ for the exact requirements.)