[Security] Request for a security reporting policy

[xinyi-hou]

Hi maintainers,

I believe I may have found a security-related issue in this project. Before sharing any details, I wanted to check whether you have a private vulnerability disclosure channel.

At the moment, I could not find a SECURITY.md policy in the repository. Would you consider adding one, or pointing me to the correct contact method for responsible disclosure?

I’m happy to share the details privately.

Thanks for your time.