Use Full Disclosure strategy and open public issue.

The project is in its early development stage so a "coordinated vulnerability disclosure" is redundant.

No formal security audits were performed.