Security Policy Reporting a Vulnerability No policy yet, please just open an issue. Better workflows will be added in case the project becomes widely known.