Create SECURITY.md

Author: GrahamTheCoder

SECURITY.md

@@ -0,0 +1,14 @@
+# Security Policy
+
+This policy has yet to ever be needed, so I'll keep it brief
+
+## Supported Versions
+
+There's rarely any reason to use an older version of the tool/library since its compatibility with other software has never changed.
+In future though, the final version with VS2017 support may receive critical severity backported updates.
+
+## Reporting a Vulnerability
+
+* Please disclose security issues directly and privately to Graham Helliwell [email protected] and cc Christoph Wille [email protected]
+* You can usually expect some kind of response within 5-10 working days.
+* Ideally the issue should be fixed on a temporary private fork and released before any details are made public to minimize the window for exploitation.