Preferred channel for a private security report?

[digital-shokunin]

Hi 👋

I've identified a potential security issue in mingo and would like to report it privately, following coordinated disclosure. This repo doesn't have a SECURITY.md or GitHub private vulnerability reporting enabled, so I can't open a private advisory here.

Could you share a preferred private contact — an email, or (easiest) enable Settings → Code security → Private vulnerability reporting so I can use the "Report a vulnerability" button? I'll send full details plus a proof-of-concept as soon as there's a private channel.

Happy to help add a SECURITY.md too if that's useful. Thanks!

[kofrasa]

enabled private reporting