Improve security practices for carbon-charts

[tay1orjones]

Hey there, Carbon team member here! 👋 We'd like to ensure the security practices for packages published from the carbon-design-system GitHub org are in place and up to date. We'd like to work with you to get the following security practices implemented:

Tasks

Beta Give feedback

1. Add a security policy to the repository
2. Enable Security advisories
3. Enable Private vulnerability reporting
4. Enable Dependabot alerts
5. Enable Code scanning alerts
6. Enable Secret scanning alerts
7. Publish your package(s) to npm with provenance statements

Most of these can be found under the Security tab for this repository. You may already have most of these implemented and turned on - if so, awesome!

For establishing a security policy, the existing security policy for the Carbon monorepo can be used as a template if you'd like. It can be modified to include proper version(s) for your package and any other attributes unique to your project that you may want to highlight.

I'm happy to meet up and chat about this if you'd like, just let me know. Thanks in advance for your help in ensuring security and stability across the Carbon ecosystem! 🙏 💙