...
KPI 3: Remediating Known Vulnerabilities in Third Party Packages (Amy)
- All Jiras for upgrading direct dependencies are closed (tickets with label= ComponentUpgrade).
- If the project is unable to upgrade a direct dependency, they must have a TSC exception with documentation of the reason the direct dependency was not upgraded.75% of direct dependencies upgraded to latest version
KPI 4: Code coverage tests (Pawel, Amy)
...