As per the linked issue, this PR adds a security policy to the repository.
The policy currently requests that vulnerabilities be reported to Russ Cox's email (copied from the README) or using GitHub's private vulnerability reporting feature (currently in beta).
If you wish to use another email or just one of these alternatives, let me know and I'll gladly modify the document.
Closes #606
As per the linked issue, this PR adds a security policy to the repository.
The policy currently requests that vulnerabilities be reported to Russ Cox's email (copied from the README) or using GitHub's private vulnerability reporting feature (currently in beta).
If you wish to use another email or just one of these alternatives, let me know and I'll gladly modify the document.