OSPO: Updating Repo to Tier 0

.github/workflows/update-codejson.yml

@@ -0,0 +1,30 @@
+name: Update Code.json
+on:
+  schedule:
+    - cron: 0 0 1 * * # First day of every month
+  workflow_dispatch:
+  pull_request:
+    types: [opened, synchronize]
+    paths:
+      - "code.json"
+
+permissions:
+  contents: write
+  pull-requests: write
+  issues: write
+
+jobs:
+  update-code-json:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Update code.json
+        uses: DSACMS/automated-codejson-generator@v1.2.1
+        with:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          BRANCH: "main"
+          SKIP_PR: "false"

COMMUNITY.md

@@ -0,0 +1,16 @@
+# COMMUNITY.md
+
+madie-layout is supported by a dedicated team of individuals fulfilling various roles to ensure its success, security, and alignment with government standards and agency goals.
+
+## Project Members
+
+<!-- TODO: Who are the points of contact in your project who are responsible/accountable for the project? This can often be an engineering or design manager or leader, who may or may not be the primary maintainers of the project.
+
+Roles to include, but not limited to: Project Owner, Technical Lead, Developers/Contributors, Community Manager, Security Team, Policy Advisor, Contracting Officer's Representative, Compliance Officer, Procurement Officer -->
+
+| Role          | Name          | Affiliation |
+| :------------ | :------------ | :---------- |
+| Tech Lead     | Nate Moraca   | ICF         |
+| Tech Lead     | Joe Kotanchik | ICF         |
+| Security      | Riddhi Desai  | ICF         |
+| Security Lead | Ben Ohe       | ICF         |

SECURITY.md

@@ -0,0 +1,12 @@
+# Security and Responsible Disclosure Policy
+
+The Centers for Medicare & Medicaid Services is committed to ensuring the security of the American public by protecting their information from unwarranted disclosure. We want security researchers to feel comfortable reporting vulnerabilities they have discovered so we can fix them and keep our users safe. We developed our disclosure policy to reflect our values and uphold our sense of responsibility to security researchers who share their expertise with us in good faith.
+
+_Submit a vulnerability:_ Vulnerability reports can be submitted through [Bugcrowd](https://bugcrowd.com/cms-vdp). Reports may be submitted anonymously. If you share contact information, we will acknowledge receipt of your report within 3 business days.
+
+Review the HHS Disclosure Policy and websites in scope:
+[https://www.hhs.gov/vulnerability-disclosure-policy/index.html](https://www.hhs.gov/vulnerability-disclosure-policy/index.html).
+
+This policy describes _what systems and types of research_ are covered under this
+policy, _how to send_ us vulnerability reports, and _how long_ we ask security
+researchers to wait before publicly disclosing vulnerabilities.

code.json

@@ -0,0 +1,117 @@
+{
+  "name": "madie-layout",
+  "version": "0.0.3",
+  "description": "A single-spa Application responsible for the MADiE application's layout and navigation structure.",
+  "longDescription": "The madie-layout repository is a single-spa microfrontend application that serves as the foundational layout and navigation framework for the Measure Authoring Development Integrated Environment (MADiE). This application provides the core structural components, routing, and user interface layout that enables seamless integration of multiple microfrontend modules within the MADiE ecosystem. Built with React, TypeScript, and Material-UI, it implements a modern, responsive design system that ensures consistent user experience across the platform. The application leverages single-spa architecture to enable independent deployment and development of different MADiE components while maintaining a cohesive application shell.",
+  "status": "Development",
+  "permissions": {
+    "licenses": [
+      {
+        "name": "CC0-1.0",
+        "URL": "https://github.com/MeasureAuthoringTool/madie-layout/blob/main/LICENSE"
+      }
+    ],
+    "usageType": ["openSource"],
+    "exemptionText": ""
+  },
+  "organization": "Centers for Medicare & Medicaid Services",
+  "repositoryURL": "https://github.com/MeasureAuthoringTool/madie-layout",
+  "repositoryHost": "github.com/MeasureAuthoringTool",
+  "repositoryVisibility": "public",
+  "homepageURL": "https://github.com/MeasureAuthoringTool/madie-layout",
+  "vcs": "git",
+  "laborHours": 0,
+  "reuseFrequency": {
+    "forks": 0,
+    "clones": 0
+  },
+  "platforms": ["web"],
+  "categories": ["Application Development", "Healthcare"],
+  "softwareType": "standalone/web",
+  "languages": ["TypeScript", "JavaScript", "React", "SCSS"],
+  "maintenance": "contract",
+  "contractNumber": [],
+  "SBOM": "https://github.com/MeasureAuthoringTool/madie-layout/network/dependencies",
+  "relatedCode": [
+    {
+      "name": "madie-root",
+      "URL": "https://github.com/MeasureAuthoringTool/madie-root",
+      "isGovernmentRepo": true
+    },
+    {
+      "name": "madie-auth",
+      "URL": "https://github.com/MeasureAuthoringTool/madie-auth",
+      "isGovernmentRepo": true
+    },
+    {
+      "name": "madie-editor",
+      "URL": "https://github.com/MeasureAuthoringTool/madie-editor",
+      "isGovernmentRepo": true
+    },
+    {
+      "name": "madie-design-system",
+      "URL": "https://github.com/MeasureAuthoringTool/madie-design-system",
+      "isGovernmentRepo": true
+    },
+    {
+      "name": "madie-models",
+      "URL": "https://github.com/MeasureAuthoringTool/madie-models",
+      "isGovernmentRepo": true
+    }
+  ],
+  "reusedCode": [
+    {
+      "name": "single-spa",
+      "URL": "https://single-spa.js.org/"
+    },
+    {
+      "name": "React",
+      "URL": "https://reactjs.org/"
+    },
+    {
+      "name": "Material-UI",
+      "URL": "https://mui.com/"
+    },
+    {
+      "name": "Okta Authentication",
+      "URL": "https://developer.okta.com/"
+    },
+    {
+      "name": "Tailwind CSS",
+      "URL": "https://tailwindcss.com/"
+    }
+  ],
+  "date": {
+    "created": "2021-08-24T21:29:43Z",
+    "lastModified": "2025-02-26T18:37:00Z",
+    "metadataLastUpdated": "2025-02-27T15:37:00Z"
+  },
+  "tags": [
+    "MADiE",
+    "measure-authoring",
+    "single-spa",
+    "microfrontend",
+    "layout",
+    "healthcare",
+    "quality-measures",
+    "CMS",
+    "React",
+    "TypeScript"
+  ],
+  "contact": {
+    "email": "semanticbits-madie-help@icf.com",
+    "name": "MADiE Support Team"
+  },
+  "feedbackMechanism": "https://github.com/MeasureAuthoringTool/madie-layout/issues",
+  "AIUseCaseID": "0",
+  "localisation": false,
+  "repositoryType": "application",
+  "userInput": true,
+  "fismaLevel": "low",
+  "group": "Center for Clinical Standards and Quality",
+  "projects": ["MADiE", "Measure Authoring Tool"],
+  "systems": [],
+  "subsetInHealthcare": ["operational"],
+  "userType": ["government"],
+  "maturityModelTier": 0
+}