Specify how to report security vulnerabilities
Specify how to report security vulnerabilities

Specify that security vulnerabilities should be sent directly to
the project's contact email rather than post in the issue tracker.

oss-generic/process