CPC Retro & What's Next  ## Metadata - Author: [[OpenJS Foundation]] - Full Title: CPC Retro & What's Next - Category: #articles - Document Note: --- tags: - #OpenJSFoundation - #CPC - #JavaScriptEcosystem Author: OpenJS Foundation Collaborators Source: YouTube / CPC Retro & What's Next Reference: [CPC Retro & What's Next](https://www.youtube.com/watch?v=ISyc1u2isGc) date created: 2025-08-22 22:15 --- # Title: CPC Retro & What’s Next – Supporting a Healthy JavaScript Ecosystem ## Table of Contents: - [📝 Summary](#-summary) - [📖 Main Content](#-main-content) - [🗒️ Notes](#️-notes) - [📖 References](#-references) - [🗣️ Paraphrase](#-paraphrase) - [📰 Newsletter](#-newsletter) - [✅ Action Items](#-action-items) - [🧪 Hypotheses](#-hypotheses) - [📊 Methodology](#-methodology) - [❓ Questions](#-questions) - [🔮 Future Research](#-future-research) - [💡 Implications](#-implications) - [🧠 Learning Styles Assessment](#-learning-styles-assessment) - [📊 Accessibility Assessment](#-accessibility-assessment) - [🌍 DEIB Assessment](#-deib-diversity-equity-inclusion-and-belonging-assessment) - [✅ Logical Validity](#-logical-validity) - [🔍 DARVO Analysis](#-darvo-analysis) - [🔍 SEO Evaluation](#-seo-evaluation) - [🎯 Conclusion](#-conclusion) --- ## 📝 Summary: The Cross Project Council (CPC) of the OpenJS Foundation reflects on its past and outlines priorities for the future. Born from the merger of the Node.js and JS Foundations, CPC focuses on infrastructure, security, governance, and ecosystem health. Discussions emphasized open governance, attracting broader participation, building trust with member companies, managing expectations between projects and funders, and leveraging funding like the $900k Sovereign Tech Fund grant for JavaScript ecosystem security. A key theme is **ensuring sustainability through metrics, clear communication, and mutually beneficial partnerships**. --- ## 📖 Main Content: The CPC plays a central role in shaping the future of the JavaScript ecosystem. It governs with transparency by streaming meetings, sharing agendas publicly, and encouraging community involvement. Leaders reflected on the **merger history** (Node + JS Foundations), challenges of aligning projects with member companies, and importance of articulating a **clear mission**: supporting the entire JavaScript ecosystem rather than merely recruiting projects. Funding initiatives, such as the Sovereign Tech Fund grant, focus on **security improvements**. Calls for using **CHAOSS metrics** highlight the need for project health accountability. CPC also sees itself as a connector between **projects and companies**, emphasizing the power of **storytelling** in demonstrating impact to sponsors. Community-driven contributions remain vital, with leaders stressing that projects need direct support (infrastructure, credits, hardware) rather than transactional relationships. Outreach, advocacy, and structural initiatives like the **standards working group** and **Community Fund** were highlighted as next steps for expanding reach and ensuring sustainability. --- ### 🗒️ Notes - [0:00](https://www.youtube.com/watch?v=ISyc1u2isGc&t=0): CPC intro → top committee in OpenJS; oversees infra, security, code of conduct. - [1:00](https://www.youtube.com/watch?v=ISyc1u2isGc&t=60): CPC emerged from Node.js + JS Foundations merger. - [2:46](https://www.youtube.com/watch?v=ISyc1u2isGc&t=166): Mission = support JS ecosystem; $900k Sovereign Tech Fund secured. - [5:36](https://www.youtube.com/watch?v=ISyc1u2isGc&t=336): Collaboration seeded at Node Summit 2017–18; CPC solves problems across projects. - [8:27](https://www.youtube.com/watch?v=ISyc1u2isGc&t=507): Call for CHAOSS metrics → 6-month reporting for accountability. - [10:52](https://www.youtube.com/watch?v=ISyc1u2isGc&t=652): Foundation as connector → projects ↔ member companies; storytelling key for sponsorship. - [13:17](https://www.youtube.com/watch?v=ISyc1u2isGc&t=797): Community-led initiatives need more support → encourage volunteers. - [14:40](https://www.youtube.com/watch?v=ISyc1u2isGc&t=880): Address misaligned expectations between projects & member companies; clarify transactional vs. supportive roles. - [18:37](https://www.youtube.com/watch?v=ISyc1u2isGc&t=1117): Current programs: standards WG, JavaScriptlandia, Community Fund → funds often underused. --- ## 📖 References: - CHAOSS Project: [https://chaoss.community/](https://chaoss.community/) - Sovereign Tech Fund: [https://sovereigntechfund.de](https://sovereigntechfund.de) - OpenJS Foundation: [https://openjsf.org](https://openjsf.org) --- ## 🗣️ Paraphrase: 1. *Original*: “Our mission is not to bring in more projects, but to help the ecosystem grow, mature, and be secure.” *Paraphrase*: The goal isn’t project recruitment; it’s about ensuring the overall health, growth, and resilience of the JavaScript ecosystem. 2. *Original*: “The foundation can better connect member companies with project maintainers by sharing impactful stories.” *Paraphrase*: A key role for the foundation is storytelling that highlights impact, bridging the gap between companies and projects to foster stronger support. --- ## 📰 Newsletter: 💡 **CPC Retro: JavaScript Ecosystem Health Check** The OpenJS Cross Project Council (CPC) is shaping the next phase of open governance in JavaScript. From securing a **$900k Sovereign Tech Fund grant** for security to exploring **CHAOSS metrics** for accountability, the CPC is doubling down on sustainability. Want to get involved? All meetings are open and streamed. Contribute via [openjsf.org/collaborate](https://openjsf.org/collaborate). This is a reminder that open source thrives when projects, companies, and contributors **work together transparently**. The CPC is the nexus where stories, funding, and collaboration intersect to keep JavaScript secure and sustainable. --- ## ✅ Action Items: - Apply **concepts of governance and transparency** from CPC to **WordPress community projects**. - Explore **CHAOSS metrics** for measuring contributor health in WordPress. - Leverage CPC’s **storytelling with sponsors** approach for The WPCC and GoDaddy open source advocacy. - Integrate **ecosystem-wide thinking** into OSPO planning: supporting not just projects but entire contributor ecosystems. --- ## 🧪 Hypotheses: - CPC transparency leads to **higher community trust** and participation. - CHAOSS-driven reporting increases **ecosystem accountability**. - Storytelling impacts **funding sustainability** for open source. ### 📊 Methodology: - Comparative analysis: projects with vs. without CHAOSS metrics. - Surveys: contributor perception of CPC transparency. - Case study: impact of Sovereign Tech Fund on JS ecosystem. ### ❓ Questions: - How can CPC improve its **global contributor inclusivity**? - What **metrics beyond CHAOSS** could measure ecosystem health? - How can **misaligned expectations** between companies and projects be reduced? ### 🔮 Future Research: - Impact of **AI/LLM tools** on project governance. - Long-term outcomes of **security-focused funding** in open source. ### 💡 Implications: - Better governance models → improved sustainability. - Metrics-driven accountability → stronger community trust. - Stories of impact → more effective fundraising. --- ## 🧠 Learning Styles Assessment: - **Visual**: Present via meeting livestreams; could add infographic dashboards. - **Aural**: Present via open meetings; add podcasts/audio summaries. - **Verbal**: Strong explanations but could enrich with analogies. - **Physical**: Weak → add hands-on contributor workshops. - **Logical**: Strong → CHAOSS metrics + security frameworks. - **Social**: Strong → open participation. - **Solitary**: Medium → add personal reflection guides for contributors. - **Naturalistic**: Weak → no tie-ins; could analogize ecosystems to natural systems. --- ## 📊 Accessibility Assessment: - Meetings are streamed → strong baseline. - Need captions + transcripts for accessibility. - Foundation site should ensure WCAG 2.1 AA compliance. --- ## 🌍 DEIB (Diversity, Equity, Inclusion, and Belonging) Assessment: - Open participation supports inclusivity, bu - Summary: The speaker discusses the Cross-Project Council (CPC) within the OpenJS Foundation, which works on a variety of issues related to the Foundation and its projects, such as infrastructure, security, and codes of conduct. They also mention initiatives like The Sovereign Tech fund, which provides grants for security work in the JavaScript ecosystem. The speaker asks for input on what problems the open source community faces and how the CPC can better support projects and connect with member companies. They also touch on the mission of the Foundation, which focuses on supporting the overall health and growth of the JavaScript ecosystem. - URL: https://www.youtube.com/watch?v=ISyc1u2isGc&list=PLyspMSh4XhLO15jJD9Sj069fN18j12AbQ&index=2&ab_channel=OpenJSFoundation yeah I don't really have a planum it's just not unusualuh so maybe it makes sense to start likeI don't know if anybody even knows whatCPC isum it stands for the cross projectCouncil it's kind of the the topCommittee in the openjs foundationumwe do a lot of work there that sort ofspans uh across the foundation andacross the projects and umyeah what what what more can I say thereyou know we're working on likeinfrastructure and security andum you know code of conduct uh uh uhpracticesumand it was the the cross budget Councilwas born out of the the bootstrapcommittee which was the group that thatmerged the two foundations for folksthat don't know the openjs foundation isthe merger of the JS foundation and thenode.js foundation um and so we just kind of continued thework from there uh we meet every otherweekand uh we we kind of Switched the timeto try and help what time zone stuffs uhand then on the off weeks we do workingsessions which we started doing I don'tknow maybe a year ago or something uh wewere meeting every week uh which for along time we need we meet we needed tomeet every week we were we were doing alot of stuffumso yeah that's kind of a bit of an introuh as with most things at the openjs foundation if you're interested ingetting more involved uh you can go toopenjsf.org collaborate and there'slinks to the slack to the the GitHub andand um you know YouTube and all theplaces where we are uh for folks thatdon't know we we took a lot of the ethosfrom the node.js foundation where we tryto do as much as possible in the openand so all meetings uh have meetingissues with the agenda in there that'sautomatically generated from a machine underneath Michael Dawson's desksometimes he's got a kick itum but yeah it's all open uh themeetings are open the meetings arestreamed you can you can uh kind of uhlurk umif you want to to see what we're workingonum and so normally these collaborativeSummits are sort of some of the sessionsare a little smaller and we kind of talkabout things but um so we can try to dothat here if you want umyou know I was curious what folksthought uh was working well and and whatwe could be doing better and any ideason you know how to get more folksinvolved there are a few initiativesthat we're working on right now that arethat are really exciting uh like TheSovereign Tech fund that we securedrecently weumuh are getting a grant of over ninehundred thousand dollars to work onsecurity and the JavaScript ecosystem so that's super exciting and we'll probablytalk about that uh in maybe a half houror soum a little bit more in detailbut um I don't know I can open up thefloor if anybody has any thoughts orquestions or things that they think weshould be doing differently or whatnotuh Darcyyeah I'm just wondering does the CPC oreven openjs have like a missionstatement do we have like a general likewhat are we trying to accomplish um is it to bring on board more projectsinto the foundation and support them isit to make uh building or writingJavaScript more sustainable ormaintainable long term like do we have aset mission statement I know there'slike a lot of governance and andarticles in regards to how we operate asa foundation but maybe it's like whatwhat are we trying to accomplish likewhat can we all Galvanize around yeahit's a really good question and I knowwe wrote one because I think that was one of the first things we did when wewere working on the mergerum and I'm I have to assume it's on theuh the foundation website somewhere butdo we know it exactly because I haven'tlooked at in a long time my my thinkingis and and my impression of of the workthat we do is really to support theJavaScript ecosystem overallum and so sure we are happy to haveprojects join the foundation if that youknow makes sense and and we do have somesome guidelines for when a project does make sense to join the foundation butoverall the work that we do is reallygeared towards the the ecosystem overallum you know we certainly use ourprojects as as sort of uh launchingpoints and whatnot but even the TheSovereign Tech fund you know the stuffthat we're trying to do there uh we'rethinking about the entire ecosystemum so I don't know if that reallyanswers your question but I thinkyou know uh I don't think the goal isnecessarily to bring in more projects like as the goal the missionum certainly more member companies isgreat and something we work onyeah uh it's not the mission though Ithink the mission is really just to tohelp support andumyou know help help the JavaScriptecosystem Thrive and grow and and matureand be secure and all those kinds ofthings would you agree Robin okay yeah healthy is a great worduh Jory I think I saw you raise youryour handum yeah I don't rememberum what I was gonna sayum because that's typical for meum one thing that struck me today wasthat that seed that was planted for theCPC to become what it is today for theopenjs foundation to become what it istoday was planted hereum you know in 2017 2018 at what was then the node collaborator Summitum and I think one of our one key factorfor our vision for what the new thingwould be would be that we're able toreally uh gather feedback and input andand understand the needs of not just thenode.js community or the jQueryCommunity or the dojo Community but likeacross all of the projects what are theproblems that they're facing and how canwe as a collection of Open Sourcemaintainers use our combined power to solve them for everybody and I thinkthat's where the Sovereign Tech fundinfrastructure investment is reallygoing to come into a big play that we'vehad a lot of emphasis on security thanksto folks like Darcy and and others andso I think one of the questions that Iwould ask us to consider for for you allin this room is like what what are thoseproblems that you're having and how canthis group of peopleum come together to solve them and andhow can we do that with the CPC yeah number one I I we were talkingabout this earlier it's really kind ofum I don't know if exciting is the rightword but to be in this space again whenwe were working on the merger and Joryand I and a few other folks were a bunchof other folks wereout in the hallways with sticky notesand talking about uh uh you knowhow we were going to merge and what wasimportant and what we're gonnahow these two organizations even though they seem similar were actually quitedifferent uh how we were going to bringthem together hey Matteoumbut I think uh if I can take yourcomment further like I wonder what wouldbe a good way for folks to surfacethings you know you know what are somegood channels that uh could be open forcomments or or needs orumdoes anybody have any thought one obviously security is one that we'repaying extra special attention to rightnow but you know are there otherproblems or policy questions or likeareas of support that we need to bepaying more attention to like you knowthe rise of like copilot and other kindof tooling we don't have guidance yetfor projects on how to use those safelyshould we do something you know is thata problem yet for people if not then ifit ain't broke don't fix fix it but you know that like those are the things thatI want to know what's what's oneverybody's mind yeah yeahand and we can open it up uh darciothank youyeah I was just gonna say like I'm notsure if the projects today like startedoff asking about the mission statementwe're talking about a healthyumlike the the foundation projects arehealthy and you know uh secure like arewe using like chaos metrics at all canwe be reporting every six months we get together can we report be reporting onsort of metrics about how the state ofthose projects are doing or theecosystem at large is doingum and again I think the jewelry is bornas well like are we keeping track likewhat are the things that we keep trackof the data points that we have todaythat we are like Hey we're actuallydoing a good job we're being successfulum keeping ourselves accountableobviously is like really important Iknow like even inspired by Wes's workwith ex the express status board rightlike was a good first step at trying to like surface data so that we canactually be like hey did we make animpact hereum but also there's brand new areas thatwe have to like consider like obviouslyAi and Licensing that's like I'm not alawyer but that scares me that wholeum yeah foreignI was thinking actually one thing thatthe foundation probably is uniquely positioned to do and maybe do betterbecause I don't know if this is allhappening right now is connecting themember companies with the projects likedoing some Outreach to like con theprojects are looking for supportI can I'm not you know speaking oncompany behalf but I'm involved in abunch of the conversations uh we're amember but we're looking for ways toconnect with the maintainers moredirectly right so we can do that on aone-off basis but I think the foundationactually sits in that like Nexus point whereespecially when we're talking about thecross project Council like I feel likethere's probably some want and I knowthere is from our side to connect withthe maintainers of the the pieces thatwe really care about rightum and I think the foundation probablycould do that better than any othergroupum so I think that would be somethingthat I would like to see you know alittle bit morefocus on and specifically the foundationdoing that Outreach not like you know I'm I'm here I think Alex is coming herelater Alex is on the board I'm sure thathelps but I imagine a lot of otherpeople maybe who aren't quite asinvolved in the foundation are probablywould love to see you know a nice emailthat says hey here's some some projectleaders who are are looking to connectwith some of the users at the bigcompanies maybe there's some fundingsituation they're looking for maybethere's justI'd like to come and give a talk at acompany X about the project and see howyou're using it like stuff like that I think would be would be again somethingspecificthat the foundation could do that youknow the projects can't really do aswell on their own I thinkone thing I'll add to that is that likethe currency of that conversation islike stories and impact and things likethat right soum we kind of have to when Robin ormyself or when we go talk to membercompanies they want to know well youknow can what's the case study what's the story that we can kind of tellbecause for them if it's something likeoh we're we're giving free credits orsomething like that to support this opensource project then from a marketingstandpoint they don't necessarily get alot by just giving us those free creditswe have to like tell them some kind ofstoryum and that is something that at the atthe LF level they're investing a lotmore and there's somebody's actuallygoing to go out and try and like Sourcethose but I think we could um and Kylie and and Robin and I couldyou and Ben could use your help kind offiguring out what are those likepowerful stories what are those needsbecause if we can we can connect peopleand then tell a story about it thenthey're like okay money you know orcredits or whateverwe have one also new work stream out ofthe open ssf grant for node.js andthat's essentially advocacy and soRaphael is part of his job now is to goand find member companies and givepresentations or at third party events just to share all of the security bestpractices from node into thoseinto those developer communitiesyeah and one thing that comes to mindfor me too and I recognize you know mostof the folks in here but umyou know we can always use more help tooso if you have ideas I know we're allbusy right but um if there's somethingthat does spark an interest for you andyou want to help make that happen uhplease because a lot of the work thatwe're doing yes we have uh folks who are are part of the foundation who are paidto do some of these things but a lot ofit is Community Driven so um anybodywants toyou know spearhead any of theseinitiatives or these ideas uh pleasecome talk to us join the slack andwhatnotone of the things that I find a littlebit like especiallyputting on the project leader type of situation when I am at aevery time there isessentially somebody a member companythat happened also in the past okay I'mjust and uh um I don't want to nameanybody but there was a I I've beenchatting to member companies that's alsoon the Lino's Foundation side and so onandum toto some extent there was this feeling ofor some expectation of transactionalityby member companies and I to be honest II don't know exactly how toyou know it's it seemed more of weproject need to do something for you member because you arefunding you're funding the foundationnow I'm not this is typically not thecase but most of the time it's not thecase but there was this feelingand it was more of a feeling than a youknow an obligation on anything but it'sI'm justandmore often though what we need asprojectsis oh but what can you do for us like notvice versa okay so this isumthe moment you start to establishimprove this kind of communication is tobeclear that you know what can youremember can do moreto support more of the projects and notumlike setting up the expectationscorrectly okay from from a Project'sperspective and from a member perspective because it might be thatthere is ummisalignmentsome is matchmisalignment on on the expectations andit would be badyeah that's interesting I wonder I meanI've seen that a little bit butumyeah that's an interesting thought Imean I thinkit makes sense thatyou'd want to maybe come to that conversation with that thought in mindthat it is kind ofyou know you helped me I help you Ithink along the lines of what what Jorywas even saying like if there's a storyor some way that there could be somemarketing or something you know I meanit's a shame when you go talk to themand they're just like what are you gonnado for me but um I think ifyeah if you can make it mutuallybeneficial that that probablyyeahbut you know maybe there there is moreuh expectations to be kind of set and managedumI'd like to talk to you more about thatoffline Maybeyeah yeah yeah it's interestingI would add that like I think theprojects are happy to support or amplifywhen companies do helpso like if they come in and like we havepeople who donate hardware for the nodeCI we want to know how we can help themget it take advantage of that I guess it's more if they come in and say wellhey I joined the foundation now what areyou going to do for me we're like wellyou haven't done anything directly youknow where's where's very clear if yousaid like here's some here's somehardware for your project then like ohyeah and here's the story where we'vedone this we're happy to say let's writea story on how we use that Hardware howthat helpsso maybe you like you know what it isnot how you can help mefrom what I've already given you it'slike hey let's get together and like heyhow can you help the project oh yeah andthen how can we help you for helping us would be a better way to go yeahyeah to bring the foundation into someof those conversations because they dotypically have a marketing hat on or oryou know ways to sort of take advantageof these relationships so I think thatmakes senseokay one last thing before we wrap uphere we're three minutes Mark uh can yougive some examples of initiatives likeprojects that this CBC has been recentlyworking on that kind of kind ofillustrate the type of work that CPC has has been doingI mean the security work I think isreally interesting and we haven'tuhbefore securing The Sovereign Tech fundwe were sort of doing it um withoutpromoting it too much just sort ofgetting the ball rolling uh but thatthat is very much rolling now uh andthat's really exciting and we'llactually talk about that some more afterthe the the next hour is the node.jssecurity uh update as well as openjs security collab spaceum what other things have we beenworking on I know Jory you were you saidthere was a whole list of thingsso I think there's a lot of things thatare that we do that just don'tnecessarily get a lot of the visibilitybecause you know um I mean for oneShameless plug the standards workinggroup has been really busy on a numberof different things and there's a lot ofthings we'd like to continue to do liketo do more of and so your help and engagement in that working group wouldbe much appreciated there's additionalprograms that we have set forth like theJavaScript landia um like project andthat's something that I think would be agreat place for newcomers to come getinvolved in that community and kind ofgrowing that to its next stageum you know there's the there's the uhjust general upkeep and maintenance of things that change and evolve like ouryou know travel fund documentation andthings like that which when you know asmall group of really active peopledrive it that's great but it also kindof starts to fall apart as other likepriority Stacks so we couldum you know really use a lot of help Ithink across a lot of vectorsI'm I'm I my brain kind of stops whenI'm up here but I'm glad you mentionedstandards but also yeah I mean thetravel fund was converted to theCommunity Fund and we have all sorts of ideas that we want to do with the moneythat we have every year uh which weusually don't use up so if you want tohelp us spend money uh that would be agood way to get involvedyeah so um anyway we meet every uh otherTuesday uh it's on the calendar uhcalendar.openjsf.org uh not to beconfused the node.js one is slashcalendar the foundation is calendar dotbut um we'll call it a wrap on that yeah okay great thanks[Applause], CPC Retro & What's Next, OpenJS Foundation, 01h3j5crx1ys5rdg0dkadgf21h.