Here is an overview of the Haskell security infrastructure, detailing the security team, the advisory database, the libraries developed for security metadata, and how downstream tools leverage this data.
Overview of Haskell security tooling | The Haskell Programming Language's blog by @gdifolco