You can now use the REST API to check if a repository has private vulnerability reporting enabled.

Learn more about:
Evaluating a repository’s security settings
Repository security advisories
Private vulnerability reporting