Guiding Principles for Open Source Vulnerability Management

We're developing a set of principles for better open-source vulnerability workflows. We call it "Open Source Vulnerability Management With Less Resources and More Impact," and it's a work in progress that we'd love your opinion on.