SECURITY.md

Reporting a vulnerability

If you have found any issues that might have security implications, please send a report privately to security@packagist.org

Do not report security reports publicly.