Security point of contact

[Seb]

On Saturday, 9 June 2018 at 19:03:59 UTC, Cym13 wrote:
> Yop.
>
> I need to discuss an issue related to dub. No need to alarm 
> everyone yet, that only concerns 1.3% of dub projects, but 
> still it's something that shouldn't be taken lightly.
>
> Who should I contact?

Sönke, Martin und myself.

https://github.com/s-ludwig (look in the DUB git log for his 
email address)
https://github.com/MartinNowak
https://github.com/wilzbach


> I'd very very much like to have something like a 
> security at dlang.org for such things, it's not the first and 
> likely not the last time this need arises, and the lack of a 
> clear procedure doesn't encourage coordinated disclosure.

I will try to get this email address setup.
At least we already have an official GPG keyring:

https://dlang.org/gpg_keys.html