So, let's see if I understand this. - Your website has no security page and setting this up is such a low priority that you have no ETA on when /security might

So, let's see if I understand this. - Your website has no security page and setting this up is such a low priority that you have no ETA on when /security might exist. - You instead use a third party service to manage your security disclosures. Yet, you don't link to this site from your website. - A researcher tries to contact you again and again. He gets no reasonable response so after several months he posts on Hacker News. The Hacker News post finally gets a response, yet you expect us to believe that you care about security???