[Security, important]: Lack of security a security policy and security advisories don't seem to be enabled

[jonbarrow]

This is somewhat important. It looks like security advisories aren't enabled here and there's no security policy in place either. I have a security issue to report, but would prefer to do it in a private report through the security advisories system rather than a public issue. Can this be setup please?

[ihatecompvir]

@jonbarrow Thanks for the heads up on this. I've enabled private reporting and in the meantime am starting to draft a security policy for reports. Putting together one earlier just slipped my mind completely.