Merge pull request #508 from RalphHightower/RalphHightower-patch-17

[improve](web): SECURITY.md

Author: RalphHightower

SECURITY.md

@@ -0,0 +1,9 @@
+# Reporting Security Issues
+
+To report a security issue, please email [[email protected]](milto:[email protected])
+with a description of the issue, the steps you took to create the issue,
+affected versions, and, if known, mitigations for the issue.
+
+I respond within 3 working days of your email. If the issue is confirmed as a vulnerability,
+I will open a Security Advisory and acknowledge your contributions as part of it. This project
+follows a 90 day disclosure timeline.