Merge pull request #1 from mackenly/mackenly-repo-items-beta

Repo Items Beta

.github/FUNDING.yml

@@ -0,0 +1,3 @@
+# These are supported funding model platforms
+
+github: mackenly

.github/dependabot.yml

@@ -0,0 +1,21 @@
+# To get started with Dependabot version updates, you'll need to specify which
+# package ecosystems to update and where the package manifests are located.
+# Please see the documentation for all configuration options:
+# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
+
+version: 2
+updates:
+  - package-ecosystem: "npm" # See documentation for possible values
+    directory: "/" # Location of package manifests
+    schedule:
+      interval: "monthly"
+    groups:
+      production-dependencies:
+        dependency-type: "production"
+      development-dependencies:
+        dependency-type: "development"
+    labels:
+      - "npm"
+      - "dependencies"
+    assignees:
+      - "mackenly"

SECURITY.md

@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+No version is officially supported since this is a community-driven open-source project. However, we aim to keep the latest version up to date.
+
+## Reporting a Vulnerability
+
+Thank you for wanting to report a vulnerability. To get in touch, please go to [Tricities Media Group's contact form](https://tricitiesmediagroup.com/contact) and select "Security" as the purpose. This will go straight to one of the maintainers. 
+
+If this is a vulnerability of an upstream dependency, we certainly want to do what we can to update those dependencies to minimize the risk to our users.
+
+Thanks!

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mackenly/planningcenterkit",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "Unofficial ORM for Planning Center Online",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",