docs: security contact

ajv-validator · Nov 24, 2019 · 210ba19 · 210ba19
1 parent 92ecfea
commit 210ba19
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -142,7 +142,14 @@ Functions that localize error messages are generated using doT templates in [mes
 
 ## Enterprise support
 
-ajv-i18n package is a part of [Tidelift enterprise subscription]((https://tidelift.com/subscription/pkg/npm-ajv-i18n?utm_source=npm-ajv-i18n&utm_medium=referral&utm_campaign=enterprise&utm_term=repo)) - it provides a centralised commercial support to open-source software users, in addition to the support provided by software maintainers.
+ajv-i18n package is a part of [Tidelift enterprise subscription](https://tidelift.com/subscription/pkg/npm-ajv-i18n?utm_source=npm-ajv-i18n&utm_medium=referral&utm_campaign=enterprise&utm_term=repo) - it provides a centralised commercial support to open-source software users, in addition to the support provided by software maintainers.
+
+
+## Security contact
+
+To report a security vulnerability, please use the
+[Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure. Please do NOT report security vulnerability via GitHub issues.
 
 
 ## License