chore: add security policy

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644 (file)
index 0000000..fe8fb0a
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,24 @@
+# Security Policy
+
+## Supported Versions
+
+This is the list of versions of Pinia which are
+currently being supported with security updates.
+
+| Version         | Supported          |
+| --------------- | ------------------ |
+| 2.x.x           | :white_check_mark: |
+| 2.0.0-rc.x      | :white_check_mark: |
+| 0.5.x           | :white_check_mark: |
+| < 0.5.0         | :x:                |
+| <= 2.0.0-beta.x | :x:                |
+
+## Reporting a Vulnerability
+
+To report a vulnerability please send an email with the details to posva13@gmail.com.
+
+When a vulnerability is reported, it immediately becomes our top concern, with a full-time contributor dropping everything to work on it.
+
+While the discovery of new vulnerabilities is rare, we also recommend always using the latest versions of Vue, Pinia, and its official companion libraries to ensure your application remains as secure as possible.
+
+Thanks for helping to keep Pinia secure.