🔧 Create SECURITY.md (#248)

Author: chrisjsewell

SECURITY.md

@@ -0,0 +1,14 @@
+# Security Policy
+
+## Supported Versions
+
+We generally only support the latest major release,
+although critical bug fixes can be released for older versions.
+
+## Reporting a Vulnerability
+
+To report a security issue, please email <executablebooks@gmail.com> with a description of the issue,
+the steps you took to create the issue, affected versions, and, if known, mitigations for the issue.
+Our team will respond within 3 working days of your email.
+If the issue is confirmed as a vulnerability, we will open a Security Advisory.
+This project follows a 90 day disclosure timeline.