The Solidus Blog

We’re proud to announce that Sean Denny will be joining us as a speaker for SolidusConf 2019.

As we have already announced in our Slack channel, we are currently conducting two surveys that will help us define Solidus' roadmap for the rest of 2019 and 2020.

We’re proud to announce that Alessandro Desantis will be joining us as a speaker for SolidusConf 2019.

Hey folks! 👋 Everyone knows how much we care about security. Still, we have never had an actual process for reporting and disclosing vulnerabilities. We wanted to fix this, which is why we are proud to present our new [security policy](https://guides.solidus.io/policies/security) and a HackerOne [Vulnerability Disclosure Program](https://hackerone.com/solidus). We hope this will allow us to receive more reports and handle them in a consistent, structured way, avoiding public disclosures of Solidus security issues. For the time being, the program is limited to free security vulnerability reports, but we have already started discussing a bounty program that will reward hackers to improve our platform. These costs would be supported by our OpenCollective balance. If you have any suggestions on how we can improve our security policy or our disclosure process, feel free to share them in our [Slack](https://slack.solidus.io/)!

We’re proud to announce that Jen Luker will be joining us as a speaker for SolidusConf 2019.

We’re proud to announce that Jason Swett will be joining us as a speaker for SolidusConf 2019.

We're proud to announce that this year SolidusConf will be held in Salt Lake City. Join us on October 21-24th for four days chock full of Solidus.

Solidus v2.9 is now available! Thanks to all contributors, testers, and users who made this release possible. This version's support will end in 18 months: 2021-01-16.

There's a lot of history behind Solidus, and long-time users already have a good understanding of who is behind and cares for the platform and its future. We know this is not enough: we want to empower developers and businesses with all the information they need to evaluate Solidus as the foundation for their store. That's why we have just published a document explaining our governance model. The power of Solidus lies in the diversity of its community and the passion they put into improving the software. These individuals and companies are the ones that design the future of Solidus every day. They are freelancers, consultancies, retailers, open-source enthusiasts or simply aficionados. They have different skills, interests and responsibilities. Without further ado, let’s see all the players in the Solidus game! ### Project Director At present, [Nebulab](https://www.nebulab.com) is the main code contributor and director of Solidus. They provide technical guidance and coordinate community efforts and activities. ### Core Team The Core Team is a group of individuals who are committed to maintaining the project from a technical perspective for the long term. Their main goal is to continuously deliver value to the community through their work and the work of all contributors. Here are some of the tasks they are responsible for: - implementing new features; - identifying and fixing bugs; - triaging issues; - reviewing and merging pull requests; - providing support via Slack and other channels; - improving the documentation; - providing technical feedback and guidance to contributors; - coordinating the work of contributors; - maintaining the code, documentation, and tools. ### Donors Like many open source projects, Solidus lives thanks to the donations of our amazing community. In order to be completely transparent towards the community, we chose Open Collective as our platform for collecting and spending donations. This helps us keep the project running while at the same time keeping you informed on the latest developments and how your money is being spent. If you're an agency, being a donor also entitles you to become a Solidus partner. If you're interested, head over to the [Partners](/partners) page on our website to learn more about partners. ### Stakeholders Stakeholders are members of the Solidus community who have a strong interest in the future of Solidus. This group includes retailers, agencies and long-term friends of the project. They coordinate and contribute to Solidus usually in non-technical ways, for instance by choosing what conferences to attend or organize, by identifying marketing opportunities or by deciding how to use the funds in Open Collective. ## Future-proof governance This structure is what makes Solidus unique. We love it because it allows us to hear all the voices in the community when making decisions. In case one of the entities involved can no longer take care of the project, the governance structure can be reshaped to guarantee Solidus’ survival. If you want to know more, take a look at the full [GOVERNANCE document](https://github.com/solidusio/solidus/blob/main/GOVERNANCE.md) published on our GitHub repository.

Hello, Solidus Community! For those who missed it, our new Partners page and the related Partner Program are out!

Today, we’re delighted to announce a new Solidus core team member: Andrea Longhi (spaghettic0de on Github) from Nebulab!

Are you going to RailsConf 2019 in Minneapolis? So are we! We’ve scheduled a Birds of a Feather session for Solidus users at RailsConf - if you’d like to meet some of the people who use, work on, and love Solidus, you should stop by and say hello.