Security policy

[ci skip]

Author: dahlia

SECURITY.md

@@ -0,0 +1,22 @@
+<!-- deno-fmt-ignore-file -->
+
+Security policy
+===============
+
+Supported versions
+------------------
+
+We support the latest two minor versions of the library. For example, if the
+latest version is 0.12.0, we support 0.12.x and 0.11.x.
+
+
+Reporting a vulnerability
+-------------------------
+
+If you think you have found a security issue, please *do not* open a public
+issue.  Instead, please open a private vulnerability report by [creating a new
+draft security advisory][1].
+
+We will review your report and respond within 48 hours.
+
+[1]: https://github.com/fedify-dev/botkit/security/advisories/new