LexEVS Meeting Minutes - 2023.09.06

NCI-RITM0459884

• Security team has flagged EVS stage host( nciws-p803) for JQuery vulnerability with full details as per below.

136929 (1) - JQuery 1.2 < 3.5.0 Multiple XSS - REMAINS
nciws-p803.nci.nih.gov (tcp/3000/www):
URL : http://nciws-p803.nci.nih.gov:3000/javascripts/jquery-1.11.1.min.js
Installed version : 1.11.1
Fixed version : 3.5.0

Notes: Scott said he does not think the problem is with LexEVS. Kim confirmed it is not from the browser, and it is not a meme issue. Jason wanted to give a final warning before it is removed. This issue is on the on prem stage server.

Lyuba said to wait for Tracy Safran to return. When Tracy returns, send her an email about the JQuery issue and cc Lyuba and Mark.

Status:

Waiting on monthly data release to repoint URLs - data done but Metathesaurus browser in process.

See ticket chart (above)

LexEVS Sprint Status

• • Discussion Points:

    • Working on update to Vue3 (JavaScript Framework). EVSREPEXP-451
      • master ticket: EVSREPEXP-442 - Migrate Vue.js version from 2.0 to 3.0 - complete
      • Description
        
        • Tickets 486 and 489 on Prod
    • Vulnerable dependencies - in progress (50%)
    • Ticket 487 - digital styling - on QA
    • Feedback form - in progress, waiting for survey approval

Statistics Dashboard

Discussion Points: 

• Statistics - Sumo Logic
  
  • Migration to DataDog October-March

Decision Points:

• On Hold

Discussion Points

• Waiting on AWS team

Decision Points:

Team Absences

Mayo Team - Tracy off Sep 4-8

MSC -

Leidos - Mark out Aug 22-Sep 7

QA -

Gov -

Discussion Points:

Decision Points:

Discussion Points: 

• Waiting on systems for Data release

Decision Points:

• NCIm Deployment to the Stage2 tier was successful.  QA team is currently regression testing the tag on the QA tier.  
  1. Notes: Swathi just completed the testing of the NCIm release today. We will submit a request to move it to stage, then the spring framework vulnerability will be completed.
• Term Browser is ready for deployment to Prod once the NCIm Browser is ready.
  1. Notes: The release for term browser is ready for stage. Once we move it up and get one last test, it will move to stage.

Discussion Points: 

• The Report Exporter tag was completed (201). It was completed on PROD this week.
• Another tag on the Report Exporter, (C3), which addresses a JIRA. This is complete and on QA.
• Another tag for a JIRA, which is completed on QA.

Decision Points: 

Terminology Updates and Schedule 

Discussion Points: 

Decision Points: 

Vocabulary Name in LexBIG

Short Name

Version identifier

Date the vocabulary arrived for processing

Approximate date the vocabulary version is scheduled to move to staging

Approximate date the vocabulary version is scheduled to move to production

Safran, Tracy