<ul data-eligibleForWebStory="true">Security work in open source is often seen as special and isolated.Maintainers, mainly domain experts, end up handling security tasks for projects.A new model suggests involving trusted individuals beyond maintainers for security contributions.