Security Policy

How about introducing a security policy for the Transformers GitHub repo? We could define supported versions on which the software can run and also contact details for if at all a vulnerability is discovered