@ncopa is so kind to take maintainership for scudo-malloc (see here), because it is part of the llvm project and shares release cycles
scudo-malloc