Use this section to tell people about which versions of your project are currently being supported with security updates.

1.0.0 is good

Use this section to tell people how to report a vulnerability.

Tell them where to go, how often they can expect to get an update on a reported vulnerability, what to expect if the vulnerability is accepted or declined, etc.