Project: Elixir

• Website: http://elixir-lang.org/
• Responsible: José Valim, Eric Meadows-Jönsson
• If you have any questions, send an e-mail to beam-community AT googlegroups DOT com

Ideas are listed in no particular order. Students providing their own ideas are also welcome!

Idea #1: Two-Factor Authentication for Hex

Implement Two-Factor Authentication for package publishing.

Expected results: 2FA implementation for Hex.pm (server), Hex (client), possibly rebar3 (via hex_core)

Knowledge prerequisites: Elixir, Erlang (hex_core)

Possible Mentors: Eric Meadows-Jönsson, Wojtek Mach

Idea #2: Package vulnerability disclosure for Hex

Add the ability to report vulnerabilities in Hex packages via a form on the https://hex.pm/ website. A group of trusted moderators will be notified that will either accept or reject the report, if accepted the package owners will be notified. After the fix is released, or after a deadline passes, a security advisory will be posted for the package. A good proposal would describe what other features could be part of the project.

Expected results: A website form to report vulnerabilities and an interface for the moderators to triage reports and post security advisories.

Knowledge prerequisites: Elixir

Possible Mentors: Eric Meadows-Jönsson

Idea #X: TITLE

Description.

Expected results:

Knowledge prerequisites:

Possible Mentors: