chore(repo): update issue templates and add security policy

Author: HugoRCD

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -6,24 +6,93 @@ body:
   - type: markdown
     attributes:
       value: |
-        Thanks for taking the time to fill out this bug report!
+        Thanks for the report. The more context (version, environment, **expected vs actual**), the faster we can reproduce and fix.
+  - type: input
+    id: evlog_version
+    attributes:
+      label: evlog version
+      description: "From `package.json` or `npm ls evlog` (e.g. 1.2.3)."
+      placeholder: e.g. 0.45.0
+    validations:
+      required: true
+  - type: input
+    id: runtime
+    attributes:
+      label: Runtime & OS
+      description: "Bun or Node version, and OS (e.g. `bun 1.2.3` / macOS 15)."
+      placeholder: e.g. bun 1.2.3, Ubuntu 24.04
+    validations:
+      required: true
+  - type: dropdown
+    id: integration
+    attributes:
+      label: Framework / integration
+      description: Where you use evlog (pick the closest match).
+      options:
+        - Nuxt
+        - Nitro
+        - Vite
+        - Next.js
+        - TanStack Start
+        - Hono
+        - Fastify
+        - Express
+        - Elysia
+        - NestJS
+        - SvelteKit
+        - React Router
+        - Cloudflare Workers
+        - No framework (Node/Bun only)
+        - Other
+        - Not sure
+    validations:
+      required: true
+  - type: input
+    id: adapter
+    attributes:
+      label: Adapter or drain (optional)
+      description: "If the bug involves shipping logs (Axiom, Datadog, Sentry, file system, etc.), name it here."
+      placeholder: e.g. axiom, otlp, console
+    validations:
+      required: false
   - type: textarea
     id: description
     attributes:
       label: Description
-      description: Describe the bug
+      description: What went wrong, in a few sentences.
+    validations:
+      required: true
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: What you expected to happen.
+    validations:
+      required: true
+  - type: textarea
+    id: actual
+    attributes:
+      label: Actual behavior
+      description: What happened instead.
     validations:
       required: true
   - type: textarea
     id: reproduction
     attributes:
       label: Reproduction
-      description: Steps to reproduce the behavior or a minimal reproduction
+      description: Steps to reproduce, or a link to a minimal repository / gist. If you cannot isolate it, say what you already tried.
+      placeholder: |
+        1. …
+        2. …
+
+        Or: minimal repo: https://github.com/…
     validations:
       required: true
   - type: textarea
     id: logs
     attributes:
-      label: Logs
-      description: |
-        Include any relevant logs or error messages
+      label: Logs or structured output (optional)
+      description: Relevant log lines, wide-event JSON, or stack traces. Redact secrets and tokens.
+      placeholder: Paste logs or one representative JSON event
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/config.yml

@@ -1,5 +1,11 @@
 blank_issues_enabled: false
 contact_links:
+  - name: Read the documentation
+    url: https://evlog.dev
+    about: Guides, API reference, and framework setup.
   - name: Ask a question
-    url: https://github.com/your-org/your-module/discussions/new?category=q-a
-    about: Please ask and answer questions here.
+    url: https://github.com/HugoRCD/evlog/discussions/new?category=q-a
+    about: Q&A and usage help in GitHub Discussions.
+  - name: Report a security issue
+    url: https://github.com/HugoRCD/evlog/security/advisories/new
+    about: Do not file public issues for security vulnerabilities — use a private GitHub security advisory.

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -3,17 +3,35 @@ description: Suggest an idea for this project
 title: "[feature] "
 labels: [enhancement]
 body:
+  - type: markdown
+    attributes:
+      value: |
+        **Brainstorming or “what if?” ideas** are welcome in [Discussions](https://github.com/HugoRCD/evlog/discussions) first. Use this template when you have a **concrete** proposal the maintainers can evaluate.
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem or motivation
+      description: What user or system problem does this solve? Why is it important?
+    validations:
+      required: true
   - type: textarea
     id: description
     attributes:
-      label: Description
-      description: Describe the feature you would like to see
+      label: Proposed feature
+      description: Describe the behavior, API, or experience you want (be specific).
     validations:
       required: true
   - type: textarea
     id: solution
     attributes:
-      label: Proposed Solution
-      description: Describe how you would implement this feature (optional)
+      label: Possible implementation (optional)
+      description: If you have ideas on API shape, defaults, or integration points, outline them here.
+    validations:
+      required: false
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives you’ve considered (optional)
+      description: Workarounds, other tools, or smaller changes that would partly help.
     validations:
       required: false

SECURITY.md

@@ -0,0 +1,15 @@
+# Security
+
+## Reporting a vulnerability
+
+**Please do not** open a public issue or discussion for security-sensitive bugs.
+
+Use **[GitHub Security Advisories (private report)](https://github.com/HugoRCD/evlog/security/advisories/new)** so maintainers can assess and release a fix responsibly.
+
+Include:
+
+- A clear description and impact
+- Affected evlog version(s) and, if relevant, the framework integration (Nuxt, Nitro, etc.)
+- Steps to reproduce or a minimal code sample, when safe to share
+
+We will triage reports as soon as we can. Thank you for helping keep users safe.