doc(SECURITY.md): security policy

Author: bhsd-harry

SECURITY.md

@@ -0,0 +1,28 @@
+# Security Policy
+
+If you find a security vulnerability, please do not open a public issue. Instead, please report it using GitHub's [**private vulnerability reporting**](https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/report-privately) feature described [below](#reporting-a-vulnerability).
+
+## Supported Versions
+
+Only the latest major version of this project currently receives security updates:
+
+| Package                 | Supported Version |
+|:-----------------------:|:-----------------:|
+| wikiparser-node         | 1.x               |
+| wikiparser-node@browser | 1.x               |
+| wikilint                | 2.x               |
+| wikiparser-template     | 1.x               |
+
+## Reporting a Vulnerability
+
+Please use the following steps to submit your report:
+
+1. Navigate to the [**Advisories**](https://github.com/bhsd-harry/wikiparser-node/security/advisories) tab of this GitHub repository.
+1. Click the **Report a vulnerability** button.
+1. Fill out the form with details of the vulnerability, including affected components, environment, impact, and steps or Proof of Concept (PoC) to reproduce.
+1. Click the **Submit report** button.
+
+## Response Timeline
+
+* You will receive an acknowledgement of your report within **14 days**.
+* Once the vulnerability is patched and publicly disclosed via a GitHub security advisory, you will be credited on the advisory.