The Vulnerability Disclosures Working Group serves open source maintainers and developers, assists security researchers, and helps downstream open source software consumers.
We are improving the overall security of the OSS ecosystem by helping advance vulnerability reporting and communication with tools to enable OSS maintainers to easily issue VEX documents.
The Securing Critical Projects working group also supports some of the projects in this category.