When will this module get a security advisory coverage?

Thanks for bringing this up. As this module itself simply provides a render element and doesn't otherwise have any access information, I think its safe to opt this module in as is. As such, I have opted this module into security coverage.

This how ever does not cover the OpenAPI module's data, which is exposed through this api.

Let me know if you have any questions.

Linking the OpenAPI module's related issue.