This would go along with #365's 3rd task as we would need a contact email for security:

It can be helpful to let people report security vulnerabilities to this repo - although I don't know how likely a security vulnerability is given that this is mostly a static site.