Opting into security advisory coverage

The Drupal project has a volunteer security team, who handle confidential reports of security problems in projects hosted on drupal.org. Maintainers of projects can opt in to coverage by the security team, thereby agreeing to respond appropriately to security problem reports. This section describes the process.

In brief, an individual Drupal community member applies once for a particular project to be covered by security advisories. The code in the project is reviewed. Once that community member has had a project approved, they can opt in for additional projects they maintain without further reviews.