Open source security isn't a one-time fix. It's an ongoing commitment.
As an official CVE Numbering Authority, the OpenJS Foundation coordinates vulnerability disclosure across the projects millions of developers rely on. Add in OpenPathfinder, our automated compliance
