[src/doc/book] Update 03-10-policies.md from policies.md

src/doc/MIGRATION_MAP

@@ -8,6 +8,6 @@ guide.md book/src/guide.md book/src/02-*.md
 index.md book/src/SUMMARY.md book/src/01-*.md
 manifest.md book/src/03-02-manifest.md
 pkgid-spec.md book/src/03-07-pkgid-spec.md
-policies.md
+policies.md book/src/03-10-policies.md
 source-replacement.md
 specifying-dependencies.md

src/doc/book/src/03-10-policies.md

@@ -40,7 +40,14 @@ is hosted.
 
 The Rust project has a [Code of Conduct] which governs appropriate conduct for
 the Rust community. In general, any content on Crates.io that violates the Code
-of Conduct may be removed. There are two important, related aspects:
+of Conduct may be removed. Here, content can refer to but is not limited to:
+
+- Package Name
+- Package Metadata
+- Documentation
+- Code
+
+There are two important, related aspects:
 
 - We will not be pro-actively monitoring the site for these kinds of violations,
   but relying on the community to draw them to our attention.
@@ -48,5 +55,16 @@ of Conduct may be removed. There are two important, related aspects:
   cannot be directly answered in the hypothetical sense. All of the details
   must be taken into consideration in these kinds of situations.
 
+# Security
+
+Cargo and crates.io are projects that are governed by the Rust Programming
+Language Team. Safety is one of the core principles of Rust, and to that end,
+we would like to ensure that cargo and crates.io have secure implementations.
+To learn more about disclosing security vulnerabilities, please reference the
+[Rust Security policy] for more details.
+
+Thank you for taking the time to responsibly disclose any issues you find.
+
+[Rust Security policy]: https://www.rust-lang.org/security.html
 [Code of Conduct]: https://www.rust-lang.org/conduct.html
 [sending us an email]: mailto:help@crates.io

src/doc/policies.md

@@ -30,7 +30,6 @@ Code of Conduct.
 We do not have any policies to define 'squatting', and so will not hand over
 ownership of a package for that reason.
 
-
 ## The Law
 
 For issues such as DMCA violations, trademark and copyright infringement,
@@ -58,10 +57,10 @@ There are two important, related aspects:
 
 # Security
 
-Cargo and crates.io are projects that are governed by the Rust Programming 
+Cargo and crates.io are projects that are governed by the Rust Programming
 Language Team. Safety is one of the core principles of Rust, and to that end,
 we would like to ensure that cargo and crates.io have secure implementations.
-To learn more about disclosing security vulnerabilities, please reference the 
+To learn more about disclosing security vulnerabilities, please reference the
 [Rust Security policy] for more details.
 
 Thank you for taking the time to responsibly disclose any issues you find.