Thanks for having a security policy
https://github.com/Paca-AI/paca/security
However I'm getting a 404
https://github.com/Paca-AI/paca/security/advisories/new
(You need to enable private security advisories: https://docs.github.com/en/code-security/how-tos/report-and-..., really not sure why GitHub made it opt-in only)