@patsleb @bobWP @WooCommerce It is the main development repo. However, for critical security issues, the process often happens privately. GitHub actually has a feature for this exact situation. docs.github.com/en/code-securi…