Initial guide on policy around what RustSec considers to be an unmaintained crate as well as the policy for filing an advisory