Re Security tooling is important but good communication between open source maintainers and security researchers is essential. Here’s why:
https://githubuniverse.com/events/detail/virtual-schedule/3834308c-e668-4b26-b8d7-8aafb103a88e

https://twitter.com/github/status/1590788905691119618