Page History

...

Security models can be very simple (like the Apache Commons one, which simply states it is not safe to provide possibly-malicious input to Commons libraries unless otherwise specified), or grow into an extensive document such as the Apache Airflow one which provides an in-depth description of the capabilities of various roles and the responsibilities of system administrators deploying Airflow. You can find more links to projects' security pages on https://security.apache.org/projects/

Examples of things that might be good to include in a security model:

...