Public search query: how to write a security advisory for your own library