Private security contact for Warpinator? #264

Hello, we've found security issues in Warpinator that are reachable from the local network, and we'd like to report them privately. The repository has no SECURITY.md and private vulnerability reporting isn't enabled. Could you tell us who should receive the report, or enable private reporting on this repository? Our disclosure policy: https://github.com/Totative/.github/blob/main/DISCLOSURE.md. Thanks, Totative