Blue-teaming for Exiv2: creating a security advisory process

This blog post is the first in a series about hardening the security of the Exiv2 project. My goal is to share tips that will help you harden the security of your own project.