Kyle Alspach 
GitHub is adding private vulnerability reporting for open-source projects https://github.blog/2022-11-09-everything-new-from-github-universe-2022/
Alex Chapman@kylealspach looks like it's disabled by default unfortunately, hopefully that's only until general release!
@kylealspach not to be negative about such an important feature introduction of course
@ajxchapman it's a good point to raise, it didn't come up when I spoke w/ them about it so I didn't realize that