I maintain a coordinated vulnerability disclosure repo: it explains how to do it well, why it matters to discovers and companies, and links to some relevant concepts.

Coordinated vulnerability disclosure is especially relevant right now because of the PHP disclosure affecting so many people.

Constructive feedback welcome. Free open source. Written by me by hand. Translated into many languages by Sonnet.