Create SECURITY.md (#1103)

FullHuman · Apr 12, 2023 · 8c3070b · 8c3070b
1 parent d129513
commit 8c3070b
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,17 @@
+# Security Policy
+
+## Supported Versions
+
+This is the list of versions of PurgeCSS which are currently being supported with security updates.
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 5.0.x   | :white_check_mark: |
+| < 5.0   | :x:                |
+
+## Reporting a Vulnerability
+
+To report a vulnerability, please report it directly on GitHub. If you are not able to report it on GitHub,
+you can send an email with the details to contact@full-human.com. The vulnerability report must include a
+proof-of-concept of the exploit, or at least a few pointers that can help us assess the risk level.
+Your report will be acknowledged within 2 business days.