lib/whimsy/asf/ldap.rb (8 lines):
	- line 443: # TODO: convert to RoleGroup at some point?
	- line 451: # TODO: convert to RoleGroup at some point?
	- line 656: # TODO: the old entry should probably be disabled instead, to avoid reuse of uid/gid
	- line 861: # TODO should this be deleted?
	- line 1245: # TODO members and owners are duplicated in the project object and the returned hash
	- line 1248: [project, [members, owners]] # TODO is this correct? it seems to work...
	- line 1542: # TODO: how to handle memberUid service groups ?
	- line 1553: # TODO: how to handle memberUid service groups ?


lib/whimsy/asf/svn.rb (6 lines):
	- line 347: # TODO convert to ArgumentError after further testing
	- line 739: self.svn_('add', tmpfile, _, {env: env}) # TODO is auth needed here?
	- line 743: self.svn_('delete', tmpfile, _, {env: env}) # TODO is auth needed here?
	- line 871: # TODO link to where these codes are documented
	- line 1013: puts cmds # TODO: not sure this is correct for Wunderbar
	- line 1106: filerev = l.gets.chomp # TODO should we be checking filerev?


www/members/check_boardnoms.cgi (5 lines):
	- line 19: MAIL_ROOT = '/srv/mail' # TODO: this should be config item in config.rb
	- line 27: # TODO: narrow down the search for member meetings later in the year.
	- line 77: # TODO: Work-round is to also look for EOS, but this needs to be improved
	- line 191: _ reports do |mail| # TODO: reports is not defined
	- line 193: _link MBOX + ERB::Util.url_encode('<' + mail.message_id + '>') # TODO looks wrong: does not agree with href above


www/members/check_membernoms.cgi (5 lines):
	- line 19: MAIL_ROOT = '/srv/mail' # TODO: this should be config item
	- line 27: # TODO: narrow down the search for member meetings later in the year.
	- line 93: # TODO: Work-round is to also look for EOS, but this needs to be improved
	- line 217: _ reports do |mail| # TODO: reports is not defined
	- line 219: _link MBOX + ERB::Util.url_encode('<' + mail.message_id + '>') # TODO looks wrong: does not agree with href above


tools/ponypoop.rb (5 lines):
	- line 15: # TODO: Fixup CSV output format to be more flexible, and/or add charting automatically
	- line 17: BOARD_REGEX = { # Non-interesting email subjects from board # TODO add features for other lists
	- line 35: # TODO This code doesn't actually get correct depths
	- line 72: # TODO: there's a more rubyish way to combine these loops
	- line 145: # TODO: Simplify and allow both:


www/members/proxy.cgi (5 lines):
	- line 162: _script src: "js/bootstrap-combobox.js" # TODO do we need this still?
	- line 246: # gather a list of all non-text proxies (TODO unused)
	- line 254: # TODO this assumes that the volunteer lines start with 2 spaces
	- line 268: # TODO it would be safer to look for <name>
	- line 276: # TODO: send email to @proxy per WHIMSY-78


www/roster/models/committee.rb (4 lines):
	- line 42: # TODO match using canonical emails
	- line 79: # TODO should it be canonicalised as well above?
	- line 92: role: 'PMC member' # TODO not strictly true, as CI is the canonical source
	- line 98: # TODO should it be canonicalised as well above?


tools/download_check.rb (4 lines):
	- line 57: # TODO detect artifacts by URL as well if possible
	- line 351: # TODO: perhaps just remove all white-space?
	- line 460: # TODO: is location used by hc allowed, e.g.
	- line 672: # TODO: would it help to check host against mirrors.list?


lib/whimsy/asf/member-files.rb (3 lines):
	- line 247: # TODO: change to return arrays rather than hash.
	- line 267: # TODO: handle missing availid better
	- line 289: # TODO Annotate with board nominees data?


www/members/check_boardstmt.cgi (3 lines):
	- line 57: allnoms.split('\n') do |l| # FIXME: add styles to key lines or (availids)
	- line 65: # FIXME: display message for blank/one line or when DECLINE
	- line 67: candidate_stmt.each do |l| # TODO: consider adding styles or markdown processing


lib/whimsy/asf/documents.rb (3 lines):
	- line 34: # TODO: Downdate to info
	- line 178: # TODO: should it raise an error on multiple matches?
	- line 180: # TODO use common stem name method


tools/mirror_check.rb (3 lines):
	- line 24: TODO this is a work in progress...
	- line 58: TODO - any more checks?
	- line 136: # TODO also check CT - some mirrors return text/plain for img??


tools/proxyhelper.rb (3 lines):
	- line 3: # TODO Add function to email proxies with their info
	- line 4: # TODO Add function to cross-check irc log that all proxy/attendee were marked
	- line 40: #### Main method - TODO needs to be integrated into meeting process


www/roster/views/actions/memstat.json.rb (3 lines):
	- line 61: # TODO: allow for previous reinstated file
	- line 180: # TODO handle case where rescinded file already exists
	- line 189: # TODO URL should be a config constant ...


www/roster/views/person/memstat.js.rb (3 lines):
	- line 9: if reason.size() < 10 # TODO: better check
	- line 51: # TODO check time has expired
	- line 72: # TODO: what about the emeritus file?


www/officers/surveys.cgi (3 lines):
	- line 34: # TODO factor out common survey tools into library, allowing separate members/committers surveys
	- line 104: return true # TODO: Futureuse
	- line 182: data[SURVEY] = JSON.parse(File.read(filename), :symbolize_names => true) # TODO: Security, ensure user should have access


tools/collate_minutes.rb (3 lines):
	- line 76: # TODO: consider storing actual update check time
	- line 450: # TODO: temporarily omit Additional Officer processing as it generates some incorrect ownership
	- line 460: # TODO: This does not work properly


tools/site-scan.rb (2 lines):
	- line 45: # TODO should we show them all?
	- line 257: #  TODO: does not find js references such as:


www/secretary/workbench/views/actions/check-signature.json.rb (2 lines):
	- line 84: # TODO: may need to drop the keyid-format parameter when gpg is updated as it might
	- line 163: # TODO: may need to drop the keyid-format parameter when gpg is updated as it might


www/events/talks.cgi (2 lines):
	- line 37: # TODO fix to display both submitter and/or speaker(s)
	- line 51: # TODO allow markdown styles


www/members/list-traffic.cgi (2 lines):
	- line 24: MAIL_ROOT = '/srv/mail' # TODO: this should be config item
	- line 29: COHORT_STYLES = { # TODO find better ways to colorize


www/board/agenda/views/actions/publish.json.rb (2 lines):
	- line 39: ASF::SVN.svn('update', dir) # TODO: does this need auth?
	- line 57: ASF::SVN.svn_('update', yeardir, _) # TODO does this need auth?


www/roster/models/ppmc.rb (2 lines):
	- line 38: # TODO match using canonical emails
	- line 195: # TODO: it is still expensive


lib/whimsy/asf/committee.rb (2 lines):
	- line 75: # TODO: are the concom entries correct? See INFRA-17782
	- line 114: # TODO: this is awkward to use as some non-PMCs have their own domain and some don't


www/members/mentors.cgi (2 lines):
	- line 92: mentors.each_with_index do |(apacheid, mentor), n| # TODO Should we randomize the default listing?
	- line 115: # TODO: instead of link to roster, this could read and display here


www/roster/models/nonpmc.rb (2 lines):
	- line 6: hasLDAP = !ASF::Project[cttee.name].nil? # TODO this check perhaps belongs in the library code
	- line 42: # TODO: do any non-PMCs have private lists?


www/secretary/iclaparser.rb (2 lines):
	- line 25: # TODO perhaps always extract all the data types then choose the best
	- line 293: # TODO attempt to classify data[:text] items?


www/roster/views/actions/github.json.rb (2 lines):
	- line 17: unless name =~ /^[-0-9a-zA-Z]+$/ # TODO: might need extending?
	- line 21: # TODO: perhaps check that https://github.com/name exists?


tools/mboxhdr2csv.rb (2 lines):
	- line 143: # TODO use Real Name (JIRA) to attempt to lookup some notifications
	- line 319: # TODO: figure out if we're in a .sig block, and stop counting


www/members/mentor-update.cgi (2 lines):
	- line 110: return true # TODO: Futureuse
	- line 127: # TODO: investigate if we should to --depth empty and attempt to get only that mentor's file


www/secretary/workbench/views/actions/memapp.json.rb (2 lines):
	- line 66: # TODO this should be a library method
	- line 162: # TODO combine with other SVN updates


www/roster/models/committer.rb (2 lines):
	- line 99: # TODO should this populate anything?
	- line 111: # TODO should this populate anything?


www/roster/views/actions/fullname.json.rb (2 lines):
	- line 11: # TODO should the code force 'cn' to be the same as @publicname?
	- line 37: # TODO report what would have been done


lib/whimsy/asf/person/override-dates.rb (1 line):
	- line 25: # TODO fix the default dates


lib/spec/lib/svn_spec.rb (1 line):
	- line 281: # TODO fix these tests


lib/whimsy/sitestandards.rb (1 line):
	- line 3: # TODO better document individual scans with specific policies


www/secretary/workbench/views/actions/revert.json.rb (1 line):
	- line 7: # TODO: ensure correct attachment is selected


lib/whimsy/asf/agenda/summary.rb (1 line):
	- line 98: # TODO figure out the ruby way to average these


www/secretary/workbench/views/forms/emeritus-request.js.rb (1 line):
	- line 3: # TODO: update @filed = true on submit and related reset


lib/whimsy/asf/forms.rb (1 line):
	- line 22: _div "#{__method__}(#{args[:type]}) TODO: Error condition?"


www/board/agenda/spec/spec_helper.rb (1 line):
	- line 48: # TODO: do we need to handle :stdin?


tools/merge_subscriptions.rb (1 line):
	- line 158: # TODO: link this into a file update checker


www/secretary/workbench/views/forms/icla2.js.rb (1 line):
	- line 155: # TODO: why not used?


tools/boardminutes2html.py (1 line):
	- line 93: # external URLs TODO: tighten matching ..


www/status/monitors/public_json.rb (1 line):
	- line 91: # TODO: is this a bug in monitor.rb ?


www/board/agenda/routes.rb (1 line):
	- line 540: # TODO: this is the workspace copy -- should it be using the copy from SVN instead?


www/secretary/workbench/public/fetch.js (1 line):
	- line 268: // TODO: Request constructor should accept input, init


www/secretary/workbench/models/mailbox.rb (1 line):
	- line 179: messages.delete :mtime # TODO: is this needed?


www/fundraising/invoice.cgi (1 line):
	- line 256: // TODO Support other currencies


www/roster/views/actions/ppmc.json.rb (1 line):
	- line 46: # TODO What if they still need general incubator karma? See WHIMSY-90


www/board/posted-reports.cgi (1 line):
	- line 17: MAIL_ROOT = '/srv/mail' # TODO: => Config item


tools/scan-page.js (1 line):
	- line 14: // TODO: this list is not complete


www/project/icla/views/pages/interview.js.rb (1 line):
	- line 145: if @fullName == FormData.fullname and @emailAddress == FormData.email # TODO proper validation


www/secretary/workbench/tasks.rb (1 line):
	- line 127: # TODO does it matter that the revision is not known?


lib/spec/spec_helper.rb (1 line):
	- line 89: # TODO: This is a bit of a hack


www/roster/views/ppmc/mentors.js.rb (1 line):
	- line 89: # TODO: how does this become enabled?


lib/whimsy/asf/meeting-util.rb (1 line):
	- line 153: # TODO: is that the most appropriate file to check?


tools/wwwdocs.rb (1 line):
	- line 124: # Common use case # TODO these could be static generated files nightly


lib/whimsy/asf/mlist.rb (1 line):
	- line 460: # TODO alias archivers: either add list or use RE to filter them


www/project/icla/views/pages/vote.js.rb (1 line):
	- line 212: # TODO: finish the code!


lib/whimsy/logparser.rb (1 line):
	- line 4: # TODO security check ASF::Auth.decode before reading log files


www/officers/list-traffic.cgi (1 line):
	- line 22: MAIL_ROOT = '/srv/mail' # TODO: this should be config item


www/status/monitors/system.rb (1 line):
	- line 51: # TODO change the false level to warning or danger at some point?


www/brand/list.cgi (1 line):
	- line 186: # TODO map all pmc names to projects or podlings


www/secretary/workbench/views/forms/withdrawal-request.js.rb (1 line):
	- line 3: # TODO: update @filed = true on submit and related reset


www/members/subscriptions2.cgi (1 line):
	- line 3: # TODO: combine with members@ script


lib/whimsy/asf/person.rb (1 line):
	- line 154: # TODO givenName can have multiple entries


www/roster/public_mlist_info.rb (1 line):
	- line 49: # TODO probably not worth summarising domains


www/status/monitors/git.rb (1 line):
	- line 67: # TODO Should these 3 lines be handled differently?


www/roster/views/actions/sshkeys.json.rb (1 line):
	- line 15: # TODO: add validation?


tools/moderationhelper.rb (1 line):
	- line 22: // TODO auto copy to clipboard (tricky)


tools/namemap.rb (1 line):
	- line 121: # TODO Depends on file format of exported other system accounts


www/roster/public/javascript/fetch.js (1 line):
	- line 268: // TODO: Request constructor should accept input, init


www/status/monitors/mail_jobs.rb (1 line):
	- line 54: # TODO: is this a bug in monitor.rb ?


www/officers/coi.cgi (1 line):
	- line 38: print "Status: 404 Not found\r\n\r\n" # TODO better status


www/roster/public_nonldap_groups.rb (1 line):
	- line 57: # TODO decide how to present the data: separate key or attribute or file


www/secretary/workbench/views/index.js.rb (1 line):
	- line 71: _b message.secmail.inspect # TODO better presentation of content


tools/setup_local_repo.rb (1 line):
	- line 43: # TODO it might be better to copy from samples


www/project/icla/views/actions/update.json.rb (1 line):
	- line 28: # TODO add some kind of history to show who changed the phase and when


lib/spec/lib/svn_wunderbar_spec.rb (1 line):
	- line 150: # TODO fix these tests


www/members/download_check.cgi (1 line):
	- line 102: version: '', # TODO @version when implemented


tools/asf-site-check.rb (1 line):
	- line 5: # TODO: derive from the list at:


www/roster/main.rb (1 line):
	- line 35: # TODO can this/should this be cached?