security page first draft
Merge pull request #2 from npm/ljv-security

security page first draft