docs: add CODE_OF_CONDUCT, CONTRIBUTING, and SECURITY

Author: VoxHash

CODE_OF_CONDUCT.md

@@ -0,0 +1,33 @@
+# Code of Conduct
+
+## Our pledge
+
+We pledge to make participation in LicenseChain SDK projects a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+## Our standards
+
+Examples of behavior that contributes to a positive environment:
+
+- Using welcoming and inclusive language
+- Being respectful of differing viewpoints and experiences
+- Accepting constructive criticism gracefully
+- Focusing on what is best for the community
+- Showing empathy towards other community members
+
+Examples of unacceptable behavior:
+
+- The use of sexualized language or imagery and unwelcome sexual attention or advances
+- Trolling, insulting/derogatory comments, and personal or political attacks
+- Public or private harassment
+- Publishing others' private information without explicit permission
+- Other conduct which could reasonably be considered inappropriate in a professional setting
+
+## Enforcement
+
+Report issues to **VoxHash Technologies** at [contact@voxhash.dev](mailto:contact@voxhash.dev).
+
+Project maintainers may remove, edit, or reject contributions that violate this Code of Conduct.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant](https://www.contributor-covenant.org), version 2.1.

CONTRIBUTING.md

@@ -0,0 +1,38 @@
+# Contributing to LicenseChain JavaScript SDK
+
+Thanks for helping improve this SDK. Maintained by **VoxHash Technologies** ([contact@voxhash.dev](mailto:contact@voxhash.dev)).
+
+## License
+
+This repository is licensed under the Elastic License 2.0 (ELv2). See [LICENSE](LICENSE).
+
+## Development setup
+
+```bash
+npm install
+npm run lint
+npm test
+npm run build
+```
+
+## Guidelines
+
+- Use conventional commits: `feat`, `fix`, `chore`, `docs`, `refactor`, `test`
+- Keep changes focused; match existing project style
+- Never commit secrets, API keys, or `.env` files
+- Open an issue before large design changes when possible
+
+## Pull requests
+
+1. Branch from `main`
+2. Ensure the commands above pass locally
+3. Describe the change and link related issues
+4. Confirm your contribution complies with the ELv2 license terms
+
+## Code of conduct
+
+See [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md).
+
+## Security
+
+See [SECURITY.md](SECURITY.md). Report vulnerabilities privately — do not file public issues for security bugs.

SECURITY.md

@@ -0,0 +1,26 @@
+# Security Policy
+
+## Supported versions
+
+| Version | Supported |
+|---------|-----------|
+| 1.x     | Yes       |
+| < 1.0   | No        |
+
+## Reporting a vulnerability
+
+Do **not** open a public GitHub issue for security vulnerabilities.
+
+Email **VoxHash Technologies** at [contact@voxhash.dev](mailto:contact@voxhash.dev) or [security@licensechain.app](mailto:security@licensechain.app) with:
+
+- Description of the issue
+- Steps to reproduce
+- Impact assessment if known
+
+We aim to acknowledge reports within 48–72 hours.
+
+## Security practices
+
+- Never commit API keys, tokens, or `.env` files
+- Prefer environment variables for secrets
+- Keep dependencies updated