Addition of SECURITY.md?

[andy778]

Would be good to know on first page on how the project handles life cycle and security bugs.
Definition from scorecard is good start https://github.com/ossf/scorecard/blob/main/docs/checks.md#security-policy or https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository

[pieterocp]

Yeah, could be as simple as email [email protected] and we'll get back to you.