add CONTRIBUTING.md, SECURITY.md and precommit hook
make jshint + precommit hook happy