# Governance & Contribution

 * **Primary Maintainer:** Jan Mercl, GitLab @cznic, GitHub @j-modernc-org

 * **Maintainer:** Ian Chechin, GitLab @Deln0r, GitHub @Deln0r

 * **Contributing:** See [CONTRIBUTING.md](CONTRIBUTING.md) for where to send changes, how to build and test, and which files are generated. [HACKING.md](HACKING.md) covers the maintainer side.

 * **Canonical Source:** GitLab ([cznic/sqlite](https://gitlab.com/cznic/sqlite))

 * **Community Hub:** GitHub ([modernc-org/sqlite](https://github.com/modernc-org/sqlite))

 * **Security Policy:** See [SECURITY.md](SECURITY.md). Report privately -- GitHub private vulnerability reporting, a confidential GitLab issue, or the project's GitLab Service Desk address, whose tickets are confidential by default -- never in a public issue. Patches are developed on GitLab and prioritized for immediate mirroring to GitHub. A confirmed report is published as a GitHub Security Advisory, so downstream Dependabot users are alerted, and filed with the Go vulnerability database, so `govulncheck` reports it.