I asked nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg to add a SECURITY.md to their repo on 31 July, but they haven’t, so public disclosure is the way. 🤙🏻