We need a safe way for people to report vulnerabilities. People now can go on SECURITY.md and follow our policy. We want to have a policy for expected behaviour. People can check out CODE_OF_CONDUCT.md.
