GitHub is now also a CVE CNA and can issue its own CVE numbers for bugs disclosed in projects hosted on the platform. ... It will only work for PHP projects coded to work with Composer projects.

The open source Appsmith software has been downloaded more than 5 million times with over 5,000 stars on GitHub and 120 contributors -- 100 of those from outside the company.