# SciPy BOF (Supply Chain Security)

**Please provide a title of the BoF?**

Towards Robust Security in Scientific Open Source Projects

**Please provide the abstract describing your BoF?**

In the open-source community, the security of software packages is a critical concern since it constitutes a significant portion of the global digital infrastructure. This BoF session will focus on the supply chain security of open-source software in scientific computing. We aim to bring together maintainers and contributors of scientific Python packages to discuss current security practices, identify common vulnerabilities, and explore tools and strategies to enhance the security of the ecosystem. Join us to share your experiences, challenges, and ideas on fortifying our open-source projects against potential threats and ensuring the integrity of scientific research.

**Please provide a principal contact (name and e-mail) for this BoF?**

Juanita Gomez Romero: [e-mail]

**Please share the goal of the BoF?**

The goal of this BoF is to foster a collaborative space where maintainers and contributors of scientific Python packages can discuss and develop improved security practices. We aim to identify common security challenges, share effective tools and strategies, and come up with best practices to enhance the overall security posture of the scientific open-source ecosystem.

**Is there a particular community you hope to connect with? If so, which community?**

Developers of the Scientific Python packages.

**Have prior BoFs at SciPy addressed the same issues and community that you plan to address?**

No (?)

**Will this BoF be primarily an open discussion or a panel discussion?**

--> Open Discussion
Panel Discussion

**For open discussion, please list the names and e-mails of the proposed moderators. For a panel, please list the names and e-mails of the proposed panelists. Please also indicate how you will include attendees in the conversation.**

Juanita Gomez - [e-mail]
CAM Gerlach -
Matthew Feickert (?)
Juan Cabanela - [e-mail]

To include attendees in the conversation, we will encourage interactive participation by posing questions to the group, facilitating breakout discussions on specific topics, and using collaborative tools such as shared documents or real-time polling to gather input and feedback.

**Please indicate if you have any special requests, e.g. other BoFs you should not overlap with, whether you expect high attendance, etc.**

Please don't overlap with Scientific Python Ecosystem Coordination BOF