Index: .github/mergeable.yml
==================================================================
--- .github/mergeable.yml
+++ .github/mergeable.yml
@@ -5,7 +5,7 @@
     validate: []
     pass:
       - do: comment
         payload:
           body: >
-            Thanks for your contribution!  Unfortunately, we don't use GitHub pull requests to manage code contributions to this repository.  Instead, please see the [GRG Homepage](https://reduce-algebra.sourceforge.io/grg32/grg32.php), the [REDUCE Homepage](https://reduce-algebra.sourceforge.io) or the [REDUCE Support Page](https://sourceforge.net/projects/reduce-algebra/support) at Sourceforge for details on how to report a bug."
+            Thanks for your contribution!  Unfortunately, we don't use GitHub pull requests to manage code contributions to this repository.  Instead, please see the [GRG Homepage](https://reduce-algebra.sourceforge.io/grg32/grg32.php), the [REDUCE Homepage](https://reduce-algebra.sourceforge.io) or the [REDUCE Support Page](https://sourceforge.net/projects/reduce-algebra/support) at Sourceforge for further details."
       - do: close

ADDED   SECURITY.md
Index: SECURITY.md
==================================================================
--- SECURITY.md
+++ SECURITY.md
@@ -0,0 +1,5 @@
+# Security Information
+
+## Reporting a Vulnerability
+
+As the upstream for this project seems to be currently unavailable, if any critical vulnerabilities is found, please email [\<trnsz@pobox.com\>](mailto:trnsz@pobox.com) with the details. Include "GRG3.2" in the Subject.