Guide to coordinated vulnerability disclosure for open source projects
github.com