[meta] update security policy to use GitHub PVR instead of Tidelift

ljharb · ljharb · commit 8501c298f2f5 · 2026-02-24T16:43:08.000-08:00
diff --git a/SECURITY.md b/SECURITY.md
@@ -11,4 +11,4 @@ This is the list of versions of `eslint-plugin-react` which are currently being
 
 ## Reporting a Vulnerability
 
-To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security). Tidelift will coordinate the fix and disclosure.
+To report a security vulnerability, please [file a private vulnerability report via GitHub](https://github.com/jsx-eslint/eslint-plugin-react/security/advisories/new).

Original file line number	Diff line number	Diff line change
@@ -11,4 +11,4 @@ This is the list of versions of `eslint-plugin-react` which are currently being
`11`	`11`
`12`	`12`	`## Reporting a Vulnerability`
`13`	`13`
`14`		`-To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security). Tidelift will coordinate the fix and disclosure.`
	`14`	`+To report a security vulnerability, please [file a private vulnerability report via GitHub](https://github.com/jsx-eslint/eslint-plugin-react/security/advisories/new).`