Tidelift commercial support and security policy

README.md

@@ -56,9 +56,18 @@ Available in the [Maven Central repository](https://search.maven.org/search?q=g:
 
 For Java SE 6 compatibility, use [release 1.14](https://github.com/JodaOrg/joda-beans/releases/tag/v1.14).
 
+![Tidelift dependency check](https://tidelift.com/badges/github/JodaOrg/joda-beans)
+
 
 ### Support
-Please use GitHub issues and Pull Requests for support.
+Please use [Stack Overflow](https://stackoverflow.com/search?q=joda-beans) for general usage questions.
+GitHub [issues](https://github.com/JodaOrg/joda-beans/issues) and [pull requests](https://github.com/JodaOrg/joda-beans/pulls)
+should be used when you want to help advance the project.
+Commercial support is available via the
+[Tidelift subscription](https://tidelift.com/subscription/pkg/maven-org-joda-joda-beans?utm_source=maven-org-joda-joda-beans&utm_medium=referral&utm_campaign=readme).
+
+To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure.
 
 
 ### Release process

src/changes/changes.xml

@@ -14,6 +14,9 @@
         Deprecate existing `writeToBuffer()` methods.
         See #196.
       </action>
+      <action dev="jodastephen" type="add">
+        Add Tidelift commercial support and security policy.
+      </action>
     </release>
     <release version="2.3" date="2018-08-10" description="v2.3">
       <action dev="jodastephen" type="add">

src/site/markdown/index.md

@@ -144,9 +144,11 @@ See the [related projects](related.html) page for Maven, Gradle and IntelliJ int
 
 ### Support
 
-Support on bugs, library usage or enhancement requests is available on a best efforts basis.
-
-To suggest enhancements or contribute, please [fork the source code](https://github.com/JodaOrg/joda-beans)
-on GitHub and send a Pull Request.
-
-Alternatively, use GitHub [issues](https://github.com/JodaOrg/joda-beans/issues).
+Please use [Stack Overflow](https://stackoverflow.com/search?q=joda-beans) for general usage questions.
+GitHub [issues](https://github.com/JodaOrg/joda-beans/issues) and [pull requests](https://github.com/JodaOrg/joda-beans/pulls)
+should be used when you want to help advance the project.
+Commercial support is available via the
+[Tidelift subscription](https://tidelift.com/subscription/pkg/maven-org-joda-joda-beans?utm_source=maven-org-joda-joda-beans&utm_medium=referral&utm_campaign=website).
+
+To report a security vulnerability, please use the [Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure.