Request for the addition of a Security policy

This project appears to not have a Security policy, this makes it harder for this package to be adopted in some cases with strict company policies.

Would it be possible for a security document to be added to the repo and linked to GitHub's security feature?

https://github.com/iamkun/dayjs/security/policy

I am happy to help submit a PR for this, but would need to know the preferred email address for these kinds of reports.

Review GitHub's security policy feature at the linked policy page and determine the preferred security-reporting email with the maintainers. Add the security document to the repository and link it through GitHub's security feature; done means the policy is publicly available and reports have a specified contact.

Written by the indexing model from the issue text.