📝 Add SECURITY.md

Author: deraw

SECURITY.md

@@ -0,0 +1,16 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 2.x.x   | :white_check_mark: |
+| 1.x.x   | :x:                |
+
+## Reporting a Vulnerability
+
+To report a security issue, email [[email protected]](mailto:[email protected]?subject=SECURITY) and include the word "SECURITY" in the subject line.
+
+We will send you a response indicating the next steps in handling your report. After the initial reply to your report, we will keep you informed of the progress towards a fix, and may ask for additional information or guidance.
+
+Report security bugs in third-party modules to the person or team maintaining the module. You can also report a vulnerability through the [Node Security Project](https://nodesecurity.io/report).