Security contact needed — no SECURITY.md or private reporting channel

Hi maintainers, I'd like to report a security issue in fastcore privately rather than in a public issue, but this repo has no SECURITY.md and GitHub Private Vulnerability Reporting (/security/advisories/new) is not enabled. Could you enable Private Vulnerability Reporting (Settings → Security), add a SECURITY.md, or point me to a private security contact? I'll send full details there. Thanks!

— Mohammad Adnan (CyStack red team), GitHub @mohammedix88

Start by checking whether the repository root contains SECURITY.md, then review GitHub Settings → Security for Private Vulnerability Reporting. Done means a private reporting channel is available and the repository provides a SECURITY.md or private security contact explaining how to report vulnerabilities.

Written by the indexing model from the issue text.