All work happens directly on GitHub. Both team members and external contributors send pull requests which go through the same review process.
If you find a security vulnerability please avoid opening an issue and instead contact a team member directly at https://github.com/orgs/merit-network/people.
Please open a pull request and we'll review your changes.