services_core/vendor/nesbot/carbon/SECURITY.md

Security Policy

Reporting a Vulnerability

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.