Jira has become very heavy-weight over the years and I'm not sure we need all those features. I think Github issues are a bit too lightweight perhaps, so I'm not actively promoting option E, just lifting it up as a real alternative.
> As an example how would you implement the security issue visibility with > original poster and PMC able to see it in github? Think they have something in the makings for this, see https://github.com/apache/lucene-solr/security/policy Have no idea if you can limit the group who sees them to PMC members though. -- Jan Høydahl, search solution architect Cominvent AS - www.cominvent.com
