# Open Web Application Security Project (OWASP) Application Security Verification Standard (ASVS)

This repository aims to host the versioned and authoritative source data for the OWASP ASVS project.

## Why JSON?
In order to build on top of this data a strict and normalized format was required (
unlike say storing everything in MarkDown or HTML) as it's much easier to remove strictness then to add it.
There are many data serialization formats, those with broad support include: XML, CSV and YAML.

JSON requires less syntax for the equivalent semantics than XML.
JSON has a formal specification, that implementations actually follow, unlike CSV.
JSON has better support and is wider known than YAML.

## Why NodeJS executables?
Not all OWASP users may be familiar with Python, PHP, Java, C, C++, Bash, etc.
But all should be familiar with JavaScript.

# Versioning
Using Semver2.

# Packaging
Feel free to send a PR with support for alternate package formats!
# Open Web Application Security Project (OWASP) Application Security Verification Standard (ASVS)

This repository aims to host the versioned and authoritative source data for the OWASP ASVS project.

## Why JSON?
In order to build on top of this data a strict and normalized format was required (
unlike say storing everything in MarkDown or HTML) as it's much easier to remove strictness then to add it.
There are many data serialization formats, those with broad support include: XML, CSV and YAML.

JSON requires less syntax for the equivalent semantics than XML.
JSON has a formal specification, that implementations actually follow, unlike CSV.
JSON has better support and is wider known than YAML.

# Versioning
Using Semver2.

# Packaging
Feel free to send a PR with support for alternate package formats!
Remove the snobbery about Node, any tools in any languages are allowed as long as they can be executed by maintainers
Remove the snobbery about Node, any tools in any languages are allowed as long as they can be executed by maintainers
