docs: Add security vulnerability disclosure instructions to the Readme (

#1283)
koajs · Dec 12, 2018 · acb388b · acb388b
1 parent a007198
commit acb388b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/Readme.md b/Readme.md
@@ -204,6 +204,12 @@ the general Koa guide.
 $ npm test
 ```
 
+## Reporting vulnerabilities
+
+To report a security vulnerability, please do not open an issue, as this notifies attackers
+of the vulnerability. Instead, please email [dead_horse](mailto:heyiyu.deadhorse@gmail.com) and [jonathanong](mailto:me@jongleberry.com) to
+disclose.
+
 ## Authors
 
 See [AUTHORS](AUTHORS).