[netsurf-users] Question about security

Hello!

I am interested in learning more about the safety and security of the NetSurf project in general, and the libcss library in particular. I don't see any CVEs listed for NetSurf, have there been any security incidents in the past, and is there any infrastructure in place like fuzzing or static analysis to mitigate standard C security issues like buffer overflow or use after free ?

I am interested in libcss in particular because I would like to use it in another project, GStreamer, which is part of many Linux distros;  security is a big issue.

Many Thanks,

Aaron