Audit New Project Requirements and Process For All Things Security

[ruddermann]

• Things to think about:
• Compliance survey
• CNA
• other
• Develop recommendation on when new projects should undergo the survey (vetting, onboarding)
  Potential lightweight survey at the beginning during vetting vs. once they're accepted in in
• Present to CPC, get their buy-in and do changes to docs via submit PRs

Background Docs / Reference

• https://github.com/openjs-foundation/cross-project-council/blob/main/PROJECT_PROGRESSION.md
• https://github.com/openjs-foundation/cross-project-council/blob/main/NEW_PROJECT_APPLICATION.md