chore: add a security policy (#279)

Author: JustinBeckwith

SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## Supported Versions
+
+The only version of this library that receives regular patches, or updated dependencies is the latest semver major version (2.x).  This is free open source software I build in my spare time, so no promises on, well, you know, anything.
+
+## Reporting a Vulnerability
+
+To report a vulnerability, please email me: justin.beckwith@gmail.com.