Security advisories for contributed projects