HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
ossf
best-practices-badge
Ruby2015–2025
ossf / best-practices-badge

best-practices-badge

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

Web DevelopmentSystems & InfrastructureSecurity & PrivacyLearning & Reference
Explore on GitHubRead Hacker News discussions
10Distinct people
26Mentions
1Explicit recommenders
1.4KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

🏆Open Source Security Foundation (OpenSSF) Best Practices Badge (formerly Core Infrastructure Initiative (CII) Best Practices Badge)

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

They're talking about a different kind of best practices, but I highly recommend taking a look at the Core Infrastructure Initiative's Best Practices Project [0], which was…

dankohn1 used a recommendation phrase. One indexed comment matches. This is a phrase match, not a verdict.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 10:01:16 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year26 dated mentions

Observed mentions: 2015-10-10 09:04:16 UTC to 2025-05-22 15:23:45 UTC.

024682015-01-01 00:00:00 UTC to 2016-01-01 00:00:00 UTC (exclusive): 3 mentions; 1 submissions, 2 comments20152016-01-01 00:00:00 UTC to 2017-01-01 00:00:00 UTC (exclusive): 7 mentions; 2 submissions, 5 comments2017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 8 mentions; 1 submissions, 7 comments2018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments20202021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 0 mentions; 0 submissions, 0 comments2024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2025

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20152015-01-01 00:00:00 UTC2016-01-01 00:00:00 UTC312
20162016-01-01 00:00:00 UTC2017-01-01 00:00:00 UTC725
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC817
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC404
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC202
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC000
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC000
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC000
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC000
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC101
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC101

What Hacker News says

1 sources
arun-mani-j·Aug 16, 2024
Short summary: Netdata - "The open-source observability platform everyone needs!" (from their GitHub description) has been shipping their new dashboard (UI v2) as closed source blobs under a proprietary license (Netdata Cloud UI License v1.0) with no access to its source code. The old open source dashboards (UI v0 and UI v1) are going to be removed, leaving users no choice but to use the proprietary dashboard. Please see https://mastodon.social/@wolfshappen@fellies.social/11297258... for a detailed overview of the entire issue. I will try my best to narrate them here :). Netdata is a popular "open source" observability platform. By July 20, 2023, they released a new dashboard (UI v2) which is completely closed source, built in a private repository and is shipped under a proprietary license (https://github.com/netdata/netdata/blob/master/s
Read the rest
rc/web/gui/v...). This license explicitly prevents any kind of reverse engineering or separation: > The Software is provided in a binary form for use by end-users. You may not reverse engineer, decompile, disassemble, or modify the Software. The Software is licensed as a single product and its component parts may not be separated. Netdata owns Open Source Security Foundation (OpenSSF) Best Practices Badge (which is awarded only to free/libre open source software) but is now under discussion for removal because of the blobs - https://github.com/coreinfrastructure/best-practices-badge/i.... Major Linux distros are also aware of this issue. Debian - still ships the pre-blobs version, has an open bug report - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1045145. Nix - Split by themselves, packaged Netdata Cloud separately - https://github.com/NixOS/nixpkgs/blob/c3aa7b8938b17aebd2deec... Alpine, OpenSUSE, Red Hat, Fedora etc. have been made aware of the issue and are working on a patch. On the other hand, the open source dashboards v0 and v1 will be removed soon - https://github.com/netdata/netdata/pull/18125. Leaving users no choice by default but to use the closed-source dashboard. So if you have been using Netdata because you loved it for being open source, then you might have to reconsider your option :). (I used a title that explains the problem better, please let me know if it can be worded better.) Thanks!
In Tell HN: Netdata is shipping their new dashboard as closed source blobs

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.