Re: How to request a CVE for open source projects

[Kurt H Maier <khm () sciops net>]

On Mon, May 22, 2017 at 03:13:42PM -0600, Kurt Seifried wrote:
> Well actually they can. Why do you think we (DWF) have an extensible Json format with the data hosted in git? Hint: 
> so people can contribute.

Is it the opaque Google Docs form that fosters contribution, or the
gatekept pull-request process requiring a Github account that fosters
contribution?

At what point in the DWF process is third-party input expected to occur?
The matter is not addressed in the documentation repository.  Feel free 
to mail me offlist if the answers would induce excessive cognitive 
dissonance.

khm