Community
This is maintained by a very small team. Where you ask decides whether you get an answer, so here is the map — and an honest note about what to expect.
| You have | Take it to |
|---|---|
| A bug, or something that does not work as documented | GitHub Issues — with the version or commit, and what you expected instead |
| A question, an idea, "has anyone tried…" | GitHub Discussions |
| A patch |
A pull request. Contributions are accepted under the
Developer Certificate of Origin:
sign off every commit with git commit -s.
|
| A security vulnerability | Not a public issue. Use private vulnerability reporting under the repository's Security tab. See below. |
| Anything about the company itself | the company page |
Reporting a vulnerability
This is software that terminates TLS on purpose. If you find something, we would much rather hear it privately first.
Report it through GitHub's private vulnerability reporting — the "Report a vulnerability" button under the repository's Security tab. It goes to the maintainers and nowhere else, and it does not require you to know an email address or to trust one you found on a website.
Please include the affected component and version or commit, the impact, and reproduction steps if you have them. We aim to acknowledge within a few business days, and we credit reporters who want to be credited.
What to expect, honestly
There is no chat server, and that is deliberate rather than an oversight. A chat channel creates an expectation of a quick reply, and a small team that cannot meet it ends up publishing evidence of its own absence. Asynchronous, public, written threads are what this project can actually sustain — and they stay searchable for the next person with the same question, which a chat scrollback does not.
If the volume of questions ever makes that the wrong answer, we will say so here and open one.
Following releases
Watch the repository, or subscribe to the releases feed — an Atom URL, no account and no mailing list:
https://github.com/lantern-networks/dsse-core/releases.atomThese open with the repository on 2026-09-01, as an Experimental release. Until then there is nothing to file against.