File SECURITY.md from the latest check-in

# Security Information

## Reporting a Vulnerability

As the upstream for this project seems to be currently unavailable, if any critical vulnerabilities is found, please email [\<trnsz@pobox.com\>](mailto:trnsz@pobox.com) with the details. Include "GRG3.2" in the Subject.