Initialize with repop (#689)

CONTRIBUTING.md

@@ -5,6 +5,8 @@ _domain_ crate.
 
 This is a first draft version. Feel free to, er, contribute to it.
 
+<!-- BEGIN AUTOGENERATED -->
+
 ## Code of Conduct
 
 This project and everyone participating in it is governed by the [NLnet Labs
@@ -18,6 +20,8 @@ Before contributing to this project, please be aware of the [NLnet Labs LLM Poli
 
 [NLnet Labs LLM Policy]: https://www.nlnetlabs.nl/llm-policy
 
+<!-- END AUTOGENERATED -->
+
 ## Submitting contributions
 
 ### Pull requests

SECURITY.md

@@ -0,0 +1,31 @@
+# Security Policy
+
+## Supported Versions
+
+NLnet Labs adheres to the straightforward, semantic versioning scheme that is
+commonly used in the software industry.
+
+Support is provided in respect of the latest release, i.e. releases with the
+highest minor and patch version level. We do not backport security fixes to
+older (minor) versions. In the event a new major version is released (e.g.  from
+3.2.18 to 4.0.0), support will also be provided on the latest minor  version of
+the previous major version (3.2.18) for a period of one year from the release of
+the new major version (4.0.0).
+
+In the event that, during this period, a new patch or minor version of the
+previous major version is released, then support on these versions will only be
+provided for the remainder of the one-year-period.
+
+You can find detailed information on our software support policy here:
+
+https://www.nlnetlabs.nl/support/software-support-policy/
+
+## Reporting a Vulnerability
+
+We take security very seriously. If you have discovered a security vulnerability
+in one of our projects and you would like to report it to us, you can send an
+encrypted message to our Security Entry Point.
+
+Details are described here:
+
+https://www.nlnetlabs.nl/security-report/