Policy was purely created to comply to CII Best Practices Badging program.
Due to the nature of SwiftPlantUML no security vulnerabilities are to be expected.
Reach out to me through direct message on Twitter
Should there be any reason to publish security updates then those would be appled to the main branch.