Security Audit of libyaml

[OSTIF-Derek]

I'm Derek, founder of OSTIF and I'd like to discuss collaborating with the libyaml community on doing a security review of the project. This is entirely without cost, and we will work with you as much or as little as members would like to participate. We have a long history of collaborating with projects to help them with security and I'm happy to give you references if needed.

We'd like to look at your testing regimen and do some manual code review and then make recommendations based on our findings. We can also help with fixes if they are complex.

To move this forward, I'd like to talk with the lead contributor/s about how we can help, and how we can best work together.

If you have any questions, feel free to email me directly (my name from the beginning of this intro @ostif.org). I'm happy to help in any way that I can!

(Also I apologize for filing this as a Github issue! We couldn't find an alternative way to contact the community. We emailed privately about a month ago and did not get a response.)

All the best,

Derek Zimmer
Executive Director
Open Source Technology Improvement Fund