Security

Please do not report security issues using our public Github instance. Usethe private mailing list described below.

You are also encouraged to encrypt this email using PGP. Keys of our developerscan be found at .

How are vulnerabilities handled?

We follow a standard Apache Software Foundation vulnerability handling processwhich is described at http://www.apache.org/security/committers.html#vulnerability-handling