security policy

please report any security issues to ari.web.xyz@gmail.com rather than reporting it on github issues or anywhere public til its patched, thanks :3