Here you can find documents and other resources produced by the Security WG of theErlang Ecosystem Foundation.
We welcome feedback and suggestions, especially to public drafts: please open an issue or PR through ourGitHub repo. You can reach out to members of the working group through the#security channel at theEEF Slack workspace, or via email at security (at) erlef (dot) org.
Documents
- Secure Coding and Deployment Hardening Guidelines
- Web Application Security Best Practices for BEAM languages
- Security Vulnerability Disclosure
- Meeting Notes
Specifications
- ‘hex’ Package URL type
- Part ofHex specifications
- ‘otp’ Package URL type (draft)