Confidential comments on repository security advisories | TickerVault