sses to ensure dependencies are kept up to date.</p>

        <h3>QU30</h3>

        <p>The project provides a well-documented, secure and private channel to report security issues, along with a documented way of responding to them.</p>

        <p>The project uses the standard way of reporting ASF security issues.</p>

        <h3>QU40</h3>

        <p>The project puts a high priority on backwards compatibility and aims to document any incompatible changes and provide tools and documentation to help users 