[PROPOSAL] Add a security policy

[mertcandav]

Hi, One or more of the packages may contain very serious security vulnerabilities. I think that a security policy should be added that includes information such as reporting vulnerabilities, the patch process and how to take action when detected.

For example, here is Jule's Securiy Policy.