Create a Github Security Policy File

[joycebrum]

Hi, I'd like to know if you might have interest on creating a Github Security Policy file for pypa/packaging. The project already has a very well defined security policy so the file would only allow users to get this information through github standard ways.

It will be shown in the Security Dashboard and in the about section of the project:

So it will make it easier for users to find out how to report security issues. Optionally we can also edit the CONTRIBUTING file to mention the security policy just to avoid repetition (example).

I've made the changes in this fork https://github.com/joycebrum/packaging if you want to take a closer look. Let me know if a PR is welcome and I'll submit it ASAP.

Thanks!

[brettcannon]

I have no problem with adding the file if @pradyunsg doesn't. 🙂

[pradyunsg]

Please feel welcome to file a PR!