chore: update SECURITY.md

SECURITY.md

@@ -0,0 +1,11 @@
+# Security Policy
+
+## Reporting Vulnerabilities
+
+If you think you found a vulnerability, and even if you are not sure about it, please report it right away by sending me an email at security@ashgw.com. Please try to be as explicit as possible, describing all the steps and example code to reproduce the security issue.
+
+I will review it thoroughly and get back to you.
+
+## Supported Versions
+
+Only the latest version are supported, and I will provide security patches for vulnerabilities discovered in these versions. So I always recommend using the [latest release](https://github.com/AshGw/ts-roids/releases/latest).