diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..fcb7657
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+no releases yet.
+
+## Reporting a Vulnerability
+
+Please contact l8npjhnpy@mozmail.com with details.
+
+We can't stop you from disclosing and don't want to, but we'd appreciate a period of time to get the fix in before you go public.
+
+Just a request, I'm not your Dad.
diff --git a/package.json b/package.json
index 46adcc3..a8051e6 100644
--- a/package.json
+++ b/package.json
@@ -76,7 +76,7 @@
     "lint:trunk": "bun run trunk check -a",
     "lint:trunk:fix": "bun run trunk check -a --fix",
     "lint:types": "bun run tsc --noEmit",
-    "postinstall": "bun run-s postinstall:trunk:install postinstall:trunk:upgrade postinstall:prepare types format",
+    "postinstall": "bun run-s postinstall:prepare types format",
     "postinstall:prepare": "bun run nuxt prepare",
     "postinstall:trunk:install": "bun run trunk install --ci",
     "postinstall:trunk:upgrade": "bun run trunk upgrade --ci",