# Node.js Security team Meeting 2025-12-18

## Links

* **Recording**:
* **GitHub Issue**: https://github.com/nodejs/security-wg/issues/1538
* **Minutes**: https://hackmd.io/@openjs-nodejs/rkqsXJKGbx

## Present

* Security wg team: @nodejs/security-wg

## Agenda

## Announcements

*Extracted from **security-wg-agenda** labelled issues and pull requests from the **nodejs org** prior to the meeting.

- [ ] Vulnerability Review - https://github.com/nodejs/nodejs-dependency-vuln-assessments/issues
- [ ] OpenSSF Scorecard Monitor Review - https://github.com/nodejs/security-wg/issues?q=is%3Aissue+OpenSSF+Scorecard+Report+Updated%21+

### nodejs/security-wg

* Reduce meeting frequency to monthly [#1527](https://github.com/nodejs/security-wg/issues/1527)
* Create a VEX file for Node.js [#1517](https://github.com/nodejs/security-wg/issues/1517)

### nodejs/node

* Auditing permissions [#59935](https://github.com/nodejs/node/issues/59935)

## Q&A, Other

## Upcoming Meetings

* **Node.js Project Calendar**: <https://nodejs.org/calendar>

Click `Add to Google Calendar` at the bottom left to add to your own Google calendar.