Report security problems as an issue on this repository, with "security" in the title; they are handled first.

What counts, what happens to a dangerous release, and how the repository is signed: docs/project/security.md.