added information about downstream projects included in our security issue resolving process