dpgaspar commented on code in PR #25917:
URL: https://github.com/apache/superset/pull/25917#discussion_r1399564474


##########
CONTRIBUTING.md:
##########
@@ -180,6 +180,48 @@ See [Translating](#translating) for more details.
 
 There is a dedicated [`apache-superset` 
tag](https://stackoverflow.com/questions/tagged/apache-superset) on 
[StackOverflow](https://stackoverflow.com/). Please use it when asking 
questions.
 
+## Types of Contributors
+
+Following Apache Software Foundation's project governance, Apache Superset has 
the following types of contributors
+
+### PMC Member
+
+A Project Management Committee (PMC) member is a person who has been elected 
by the PMC to help manage the project. PMC members are responsible for the 
overall health of the project, including community development, release 
management, and project governance. PMC members are also responsible for the 
technical direction of the project.
+
+For more details on PMC members, please refer to 
https://www.apache.org/foundation/governance/pmcs.html
+
+### Committer
+
+A committer is a person who has been elected by the PMC to have write access 
(commit access) to the code repository. they can modify the code, 
documentation, and website by themselves and also accept other contributions.
+
+The official list of committers and PMCs can be found 
[here](https://projects.apache.org/committee.html?superset).
+
+### Contributor
+
+A contributor is a person who has contributed to the project in any way, 
including but not limited to code, tests, documentation, issues, and 
discussions.
+
+### Security Team
+
+The security team is a selected subset of PMC members, committers and non 
committers who are responsible for handling security issues.
+
+New members of the security team are selected by the PMC members in a vote. 
You can request to be added to the team by sending a message to 
priv...@superset.apache.org. However, the team should be small and focused on 
solving security issues, so the requests will be evaluated on a case-by-case 
basis and the team size will be kept relatively small, limited to only actively 
security-focused contributors.
+
+This security team must ensure the process follows the [ASF vulnerability 
handling 
process](https://apache.org/security/committers.html#asf-project-security-for-committers).
+
+Additionally, every new security issue is tracked as a JIRA ticket on the [ASF 
JIRA Superset security 
project](https://issues.apache.org/jira/secure/RapidBoard.jspa?rapidView=588&projectKey=SUPERSETSEC)

Review Comment:
   true, yet it may serve as a useful link for PMCs



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org
For additional commands, e-mail: notifications-h...@superset.apache.org

Reply via email to