Security Policy There's not much going on here. It's a simple json file. There's nothing about it requiring security policy.