{
  "version": "v1.0.0",
  "entity": {
    "type": "individual",
    "role": "maintainer",
    "name": "Jim Manico",
    "email": "jim@manicode.com",
    "description": "Project leader and primary maintainer of the OWASP Java HTML Sanitizer and co-maintainer of the OWASP Java Encoder, the two most widely used Java libraries for preventing cross-site scripting. Long-time OWASP leader (Cheat Sheet Series co-lead, former Global Board member) and founder of Manicode Security, which receives funds on the maintainer's behalf.",
    "webpageUrl": {
      "url": "https://manicode.com"
    }
  },
  "projects": [
    {
      "guid": "owasp-java-html-sanitizer",
      "name": "OWASP Java HTML Sanitizer",
      "description": "Takes untrusted third-party HTML and returns HTML that is safe to embed, enforcing a configurable policy of elements, attributes, CSS and URLs. Used server-side across the Java ecosystem to stop cross-site scripting in user-generated content; GitHub lists more than 4,300 dependent repositories. 45 Maven releases since 2011.",
      "webpageUrl": {
        "url": "https://github.com/OWASP/java-html-sanitizer",
        "wellKnown": "https://github.com/OWASP/java-html-sanitizer/blob/main/.well-known/funding-manifest-urls"
      },
      "repositoryUrl": {
        "url": "https://github.com/OWASP/java-html-sanitizer",
        "wellKnown": "https://github.com/OWASP/java-html-sanitizer/blob/main/.well-known/funding-manifest-urls"
      },
      "licenses": ["spdx:Apache-2.0"],
      "tags": ["security", "xss", "html-sanitizer", "java", "owasp", "web-security"]
    },
    {
      "guid": "owasp-java-encoder",
      "name": "OWASP Java Encoder",
      "description": "Context-aware output encoding for HTML, attributes, JavaScript, CSS, URIs and XML, the primary defense against cross-site scripting in Java web applications. Dependency-free and high-performance; 735 dependents on the latest release alone per deps.dev.",
      "webpageUrl": {
        "url": "https://github.com/OWASP/owasp-java-encoder",
        "wellKnown": "https://github.com/OWASP/owasp-java-encoder/blob/main/.well-known/funding-manifest-urls"
      },
      "repositoryUrl": {
        "url": "https://github.com/OWASP/owasp-java-encoder",
        "wellKnown": "https://github.com/OWASP/owasp-java-encoder/blob/main/.well-known/funding-manifest-urls"
      },
      "licenses": ["spdx:BSD-3-Clause"],
      "tags": ["security", "xss", "output-encoding", "java", "owasp", "web-security"]
    }
  ],
  "funding": {
    "channels": [
      {
        "guid": "bank-wire",
        "type": "bank",
        "description": "International wire or ACH to Manicode Security LLC, a US business account. Details provided on request."
      }
    ],
    "plans": [
      {
        "guid": "maintenance-yearly",
        "status": "active",
        "name": "Security maintenance for both libraries",
        "description": "Ongoing maintainer time for security triage, advisory handling and CVE issuance, fixes and backports, releases, dependency upkeep and user support across the Sanitizer and Encoder. Separate from any project-specific hardening grant.",
        "amount": 50000,
        "currency": "USD",
        "frequency": "yearly",
        "channels": ["bank-wire"]
      },
      {
        "guid": "one-time-any",
        "status": "active",
        "name": "One-time support",
        "description": "Any amount toward maintenance of either library.",
        "amount": 0,
        "currency": "USD",
        "frequency": "one-time",
        "channels": ["bank-wire"]
      }
    ],
    "history": []
  }
}
