No working private security-reporting channel (private vulnerability reporting disabled, no contact email)

SECURITY.md asks that vulnerabilities not be reported through public issues, but I can't find a working private channel:

• GitHub private vulnerability reporting is disabled on this repo (GET /repos/AgriciDaniel/claude-seo/private-vulnerability-reporting returns {"enabled":false}), so the "Report a vulnerability" button doesn't appear on the Security tab.
• CITATION.cff has no email, and I couldn't find a contact address anywhere else in the repo.

So the policy points away from public issues while both private routes are closed.

Could you enable private vulnerability reporting? It's Settings → Advanced Security → Private vulnerability reporting → Enable. It's free for public repos and gives you a private fork to patch in.

I have a finding from a full read of v2.2.5 that I'd rather not describe publicly. It's a medium-severity issue, not a critical one — no rush on my end, and I'm happy to sit on it as long as you need. Just tell me where to send it. If you'd prefer email over the GitHub form, an address in SECURITY.md or CITATION.cff would work too.

(Deliberately keeping this issue contentless. Happy to close it once a channel exists.)