Skip to content

Administrative security review

This issue documents the need for security review prior to release of this code as an official software release.


Project overview

The Earth in Flux chart gallery is a shared initiative between the USGS Water Mission Area and Ecosystems Mission Area to communicate key findings of USGS land change science in innovative ways, and to encourage creativity, exploration, and community in data visualization across USGS mission areas.

This repo contains JavaScript and Vue code setting up the gallery website and also includes processing and visualization code for four projects:

  • Beaufort Sea (to be released in v1.0.0)
  • Fire in Ice (to be released in v1.0.0)
  • Findex (WIP - will remain in the main branch, with status 'development')
  • Fish as Food (WIP - will remain in the main branch, with status 'development')

Note that each project has a data processing pipeline in a subfolder of the root directory. The Fire In Ice project has a subfolder for a R pipeline, and will have another for a Python pipeline (once !70 (merged) is merged)

Although only the Beaufort Sea and Fire in Ice content will be included in the official release (in target release branch 1.0.0), the content in the other branches (e.g., main) will automatically be released as a provisional product, so that content also requires administrative security review.

Review checklist

Incremental peer review

  • Development workflow included incremental peer reviews

DGEC Required documents

  • 'code.json'
  • 'disclaimer.md'
  • 'license.md'
  • 'CONTRIBUTING.md'
  • 'README.md'
  • 'CODE_OF_CONDUCT.md'

Security Review

  • No proprietary code is included
  • No personally identifiable information (PII) is included
  • No absolute directory pathways are included
  • No other sensitive information such as database passwords are included

Documentation

  • Do the authors clearly state the purpose of the repository?
  • Do the authors provide instructions for contributing?
  • Do the authors include examples of how to use the repository?

Comments

Please provide any additional comments for this code review below.

Edited by Hayley Corson-Dosch