Security Policy
Noun · Open Source
Definitions
A documented policy describing how security issues should be reported, handled, and disclosed for a project or organization. In open-source governance, a visible security policy lowers confusion for both researchers and maintainers during incidents.
In plain English: The documented rules for reporting and handling security issues.
Example: "Adding a security policy stopped researchers from filing sensitive bugs in public issues and gave everyone a clearer disclosure path."