add security.md

Author: RubenHalman

SECURITY.md

@@ -0,0 +1,25 @@
+# Security Policy for Lightning Flow Scanner
+
+## Security Practices
+
+- Code is open-source and peer-reviewed by the community.
+- Vulnerabilities can be reported privately via GitHub security features.
+- Changes to the repository are scanned and reviewed before merging.
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability, please report it using [GitHub vulnerability reporting](https://github.com/Flow-Scanner/lightning-flow-scanner-core/security).
+
+## Data Handling
+
+This project collects zero user data. No credentials, PII, payment info, or health data is ever stored, transmitted, or shared. All analysis runs 100% client-side with no network calls to any external services.
+
+## Dependencies
+
+We actively track and maintain an up-to-date inventory of all third-party dependencies to ensure security and compatibility. Our dependencies include:
+
+| Package | License | Purpose |
+
+| ------------- | ---------------------------------------------------------------------- | ----------------------- |
+
+| `xmlbuilder2` | [MIT](https://github.com/oozcitak/xmlbuilder2/blob/master/LICENSE.txt) | XML builder for Node.js |

package.json

@@ -8,12 +8,12 @@
     "node": "^18 || ^20 || ^22 || ^23"
   },
   "scripts": {
-    "clean": "rm -rf out types",
+    "clean": "rm -rf out",
     "build:js": "swc src --out-dir out --copy-files --strip-leading-paths --config-file .swcrc",
     "build:types": "tsc -p tsconfig.types.json --declaration --emitDeclarationOnly --outDir out",
     "copy:index": "cp out/main/index.js out/index.js || true",
     "copy:media": "mkdir -p out/assets/media && cp -r assets/media/* out/assets/media/ || true",
-    "copy:root-files:out": "cp README.md LICENSE.md CONTRIBUTING.md package.json out/ || true",
+    "copy:root-files:out": "cp README.md LICENSE.md SECURITY.md CONTRIBUTING.md package.json out/ || true",
     "copy:root-files:dist": "cp LICENSE.md dist/ || true",
     "____main____": "__DEVELOPER COMMANDS__",
     "build": "npm run clean && npm run build:js && npm run build:types && npm run copy:index && npm run copy:media && npm run copy:root-files:out",