Page History

...

Projects that already follow ASF policies and conventions should generally have no problem achieving a 'passing' grade for the badge, and are encouraged to do so. This page provides some pointers that might be helpful, feel free to add additional information.

Start your project name with "Apache" so it shows up in the alphabetical listing at https://www.bestpractices.dev/en/projects?page=12&sort=name. It probably makes sense to manage your listing under a PMC or Security Team account, i.e. private@yourproject.apache.org or security@yourproject.apache.org.

Private vulnerability reporting

...