This is an issue to capture if we are ready for incubation

The points below are what we need to prove easily (with demonstrable evidence):

• Clear release policy - should include dates for minor versions and dates for patches. minor versions are only bumped on the scheduled date.
• track record of releases
• Clear security policy - should include time to evaluate security advisories and should include time to bump fixed versions (CVEs).
• Track Racord of security advisories / patches released
• Contributor Ladder & Gvovernance Supporting it
• Track Record of contributor ladder being actively used
• Adopter file with clear evidence of use (blog posts, videos, testimonials interviews)