Marta Rybczynska

My preference goes to the option C.

Updated the initial post. Big thanks to @jbmaillet for additions

Interested in this one

In progress https://github.com/ossf/wg-security-tooling/pull/37

From the discussion and my experiences the items includes should be: - CPE or equivalent - contact information (might be multiple ones: general email, security email, contact form, bug tracker...

@t8m If I summarize the discussion, if there is a common consolidated wrapper for a relative path, it could be acceptable? Does it have to work on all platforms or...