Try to comply with the [security.txt specification](https://www.rfc-editor.org/rfc/rfc9116) (https://github.com/expressjs/expressjs.com/pull/1974). This file can include an [Acknowledgments field](https://www.rfc-editor.org/rfc/rfc9116#name-acknowledgments) to recognize security researchers for their vulnerability reports. Do we want this? We could do the following: - Create a new page at https://example.com/hall-of-fame.html and maintain it - Create a new section on https://expressjs.com/en/advanced/security-updates.html - Not create this page at all