Tasks, bugs, feature requests, etc. are tracked in JIRA. Please report any non-security related issues there.
For security-related issues, please email the private mailing list, private@datafu.apache.org.