HuggingFace published a security.txt file at https://huggingface.co/security.txt. The link was shared on Hacker News, where it drew 126 points and 22 comments. The file follows the security.txt standard, which provides a way for organizations to disclose security contact information.

The Hacker News discussion is available at https://news.ycombinator.com/item?id=49659245.