docs: use private vulnerability reporting

[thebuilder]

Summary

• direct security reports to GitHub private vulnerability reporting
• warn reporters not to disclose undisclosed vulnerabilities in public issues
• preserve the existing responsible-disclosure guidance

Verification

• git diff --check origin/main..HEAD
• commit hook passed

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
react-intersection-observer	Ready	Preview, Comment	Jul 14, 2026 9:12am

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[pkg-pr-new]

npm i https://pkg.pr.new/react-intersection-observer@759

commit: 0cf571b