Maintenance
How CommonLayer projects are maintained: who maintains them, what maintainers are responsible for, how fulfilment is evaluated each month, and how that connects to compensation. Security status and maintenance status are tracked separately and never merged into one indicator.
| Page | For |
|---|---|
| Maintainer handbook | Maintainers and applicants: assignments, responsibilities, SLAs, tasks, eligibility, appeals, replacement, compensation |
| Contributor handbook | Community contributors: contributions, review, rewards |
| Funding model | How the money behind compensation is held and allocated |
| Security overview | Findings, deadlines, exceptions and advisories |
Each project also documents its own maintenance practice in its repository
(docs/MAINTENANCE.md in the project template and in projects/nginx,
projects/postgresql and projects/valkey; the Valkey and PostgreSQL ones include the
duty to watch upstream advisories, because scanners see their source-built software only
through Grype).