Call out the security reporting info in the CONTRIBUTING file
Try this element
Another element
Donald says this is good
giv eup and use a header
Merge pull request #254 from alex/contributing

Call out the security reporting info in the CONTRIBUTING file