[UI/UX support for attestations] User Testing - Recruitment Messaging

[lea100x]

We are interested in testing style guide components with users to validate key UX patterns and improve documentation.

This issue will contain canned messaging for the OSSF and Superbloom teams to recruit users for this testing.

Some notes:

• Documentation - Persona 2&3 for testing - entry level up to people who persona 2 - for general recruitment on slack/community channels
• Refer to [UI/UX support for attestations] Stakeholder Engagement - Recruitment messaging for user research participants #69

[lea100x]

Audience: Personas 2&3, filled out survey, first contact

Subject: Invitation to user testing conversation: Your response to a survey from Superbloom

Hi [Name],

You recently responded to a survey from Superbloom. For privacy, security and safety reasons we won't mention the details of this survey in this outreach email unless requested in reply by yourself.

We'd like to invite you to book in a 60 min user testing conversation with our researchers at Superbloom. Are you possibly available later this week at one of the following times?

Thursday, July 31

• 2pm UK/9am ET
• 3pm UK/10am ET

Friday, August 1

• 9am UK/4am ET
• 2pm UK/9am ET

Please use the following link to book one of the time slots at your convenience: https://calendar.app.google/89ir7At87SJU1EAs9

If you'd prefer to schedule a time next week, please let us know and we can send more options. We are happy to reschedule once but we don't accept second reschedules.

Once you've booked a time we'll reach back out to you with details about the conversation and facilitate any request you may have re. alternative video/voice platforms, questions sent in written form ahead of time etc.

We look forward to speaking with you,
Anh & the project team

[lea100x]

Subject: Invitation to user testing conversation: Your response to a survey from Superbloom

Hi [Name],

You recently responded to a survey from Superbloom. For privacy, security and safety reasons we won't mention the details of this survey in this outreach email unless requested in reply by yourself.

We'd like to invite you to book in a 60 min user testing conversation with our researchers at Superbloom. Are you possibly available later this week or some time next week for a call?

Please use the following link to book a time slot at your convenience: https://calendar.app.google/89ir7At87SJU1EAs9

If you'd prefer to schedule a time next week, please let us know and we can send more options. We are happy to reschedule once but we don't accept second reschedules.

Once you've booked a time we'll reach back out to you with details about the conversation and facilitate any request you may have re. alternative video/voice platforms, questions sent in written form ahead of time etc.

We look forward to speaking with you,

Anh & the project team

[lea100x]

Audience: First contact, for posting in community channels - we want them to fill out the survey

Hi [channel/community name],

We at Superbloom Design have been working on a resource for displaying and understanding software security information and artifacts (what some may know of as “software attestations”) on repositories such as npm, PyPi, and RubyGems). You may have seen a call for user research participants we sent out a few weeks ago. We are excited to invite new users to help us in our second round of research.

We are looking for individuals to participate in a remote, user testing session. We’re interested in learning from people that may not be familiar with the term “attestation”, but either for your work/job or in a voluntary capacity, you have experience searching for and evaluating software packages. Our goal is to better understand what information is needed to be communicated to the end user about a software package’s security, safety and integrity.

As a gesture of appreciation for your time, we're paying $25 USD/per hour via Tremendous.com (or a local equivalent).

To apply, kindly fill out our private, self-hosted form beforehand. Check out our privacy policy and please note that we do not keep data on individuals past a project completion. If you have already filed out this form before, no need to fill it out again–we will be in touch shortly!

Please respond to this survey by August 8. This is when we'll close it for applicants. If you have questions for us before you fill out the survey or you find an error in the survey, you can send a secure email via pgp to oss-security-design@superbloom.design or to Superbloom’s Signal username: superbloom.03

Please feel free to forward this survey and messaging to anyone outside of this specific communication that you think would add benefit to this research.

You can check out our privacy policies here: https://superbloom.design/legal/

To be transparent and open, you can track this project's work on our github repository here: https://github.com/ossf/wg-securing-software-repos/issues

Thank you for your time - we look forward to hearing from you!

[lea100x]

@Erioldoesdesign do we want to look for new users who haven't filled out the survey to test with us? i created a draft message for sharing in community channels ^ but idk if you think they should fill out the survey?

[lea100x]

Audience: First contact, for posting in community channels - No survey

Hi [channel/community name],

We at Superbloom Design have been working with OpenSSF on a resource for displaying and understanding software security information on package registry pages such as npm, PyPi, and RubyGems.

We’re currently testing some user interface (UI) guidance for these pages. We'd like to spend 45 minutes with people to take a look at these UI elements and tell us whether they meet your needs. We’ll ask a few questions about your experience, take a look at the UI, and provide space for you to give us feedback.

As a gesture of appreciation, we're offering $25 USD via Tremendous.com for your participation.

If you are interested, please book time with us this week or the next using the following link: https://calendar.app.google/ZPS3GAzTDPS22FfU9

--
If you have questions for us before scheduling a time, you can send a secure email via pgp to oss-security-design@superbloom.design or to Superbloom’s Signal username: superbloom.03

Please feel free to forward this message to anyone outside of this channel that you think would add benefit to this research.

Check out our privacy policy and please note that we do not keep data on individuals past a project completion. Our privacy policies are available here: https://superbloom.design/legal/

To be transparent and open, you can track this project's work on our github repository here: https://github.com/ossf/wg-securing-software-repos/issues

Thank you for your time - we look forward to hearing from you!

[lea100x]

Subject: Invitation to user testing conversation

Hi [Name],

You recently responded to a survey from Superbloom. For privacy, security and safety reasons we won't mention the details of this survey in this outreach email unless requested in reply by yourself.

We'd like to invite you to book in a 45 minute user testing conversation with one of our researchers. We’ll ask a few questions about your experience, take a look at some UI we've prepared, and provide space for you to give us feedback. As a gesture of appreciation, we're offering $25 USD via Tremendous.com for your participation.

If you are still interested, please use the following link to book one of the time slots at your convenience: https://calendar.app.google/pNWDWZdo96VrsHvF9

If these times don't work, let us know and we can find something that fits your schedule better. Once you've booked a time we'll reach back out to you with details about the conversation and facilitate any request you may have re. alternative video/voice platforms, questions sent in written form ahead of time etc. We are happy to reschedule once but we don't accept second reschedules.

We look forward to speaking with you,
Anh & the project team