Add SECURITY.md

.github/SECURITY.md

@@ -0,0 +1,16 @@
+
+# Security Policy
+
+## Supported Versions
+
+LiteJS uses [Calendar Versioning](https://calver.org/) scheme
+<abbr title="BREAKING.FEATURE.FIX">YEAR.MONTH.PATCH</abbr>[-rc.NUM].
+
+Current and previous year versions are supported with security updates.
+
+## Security contact information
+
+To report a security vulnerability, please use the
+[Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure.
+