Please see -> https://fedoraproject.org/wiki/Security_Team
The wiki has been updated to add FST process details. Please have a look in case you spot
Earlier today, I was discussing with Huzaifa(https://fedoraproject.org/wiki/User:Huzaifas)
who said, we need to define how we handle issues in packages wherein upstream is
unresponsive or is dead. We need to close such issues and retire those packages.
If you know other such instances wherein users don't know what to do, let's please
collate them together and define a course of action for them.
Your comments/inputs/suggestions are most welcome! :)