Create SECURITY.md

SECURITY.md

@@ -0,0 +1,9 @@
+# Security Policy
+
+## Supported Versions
+
+This repository uses [Semantic Versioning](https://semver.org/).  The latest MAJOR version is always supported for security updates.  Older MAJOR versions are supported for at least one year after the new version has been released.  In general, only the last 4 versions of the Python interpreter are supported.
+
+## Reporting a Vulnerability
+
+To report a security issue, please use the GitHub Security Advisory ["Report a Vulnerability"](https://github.com/pronovic/auth0-token/security/advisories/new) tab.