Add documentation of security implications

README.md

@@ -1,4 +1,4 @@
-# stub_uploader
+# Typeshed Stub Uploader
 
 [![Build status](https://github.com/typeshed-internal/stub_uploader/actions/workflows/check_scripts.yml/badge.svg)](https://github.com/typeshed-internal/stub_uploader/actions/workflows/check_scripts.yml)
 [![Upload status](https://github.com/typeshed-internal/stub_uploader/actions/workflows/update_stubs.yml/badge.svg)](https://github.com/typeshed-internal/stub_uploader/actions/workflows/update_stubs.yml)
@@ -60,3 +60,7 @@ and entering `.*` will select all packages.
 Note that this action also sorts packages in the dependency order, but it doesn't update the typeshed commit. It may update
 [list of uploaded packages](https://github.com/typeshed-internal/stub_uploader/blob/main/data/uploaded_packages.txt)
 if this is the first time the package is uploaded.
+
+## Security Implications
+
+Please see the [SECURITY.md](./SECURITY.md) document for more information.

SECURITY.md

@@ -0,0 +1,34 @@
+# Security Implication of the Typeshed Stub Uploader
+
+Security for the stub uploader is of the highest importance. If the stub
+uploader gets compromised, an attacker could upload manipulated stub
+packages to gain full access to developer machines or even production hosts.
+Considering the high trust, quick turnaround, and automated installation of
+stub packages, this could have significant security implications.
+
+## Maintainers
+
+TBD
+
+## Typeshed Data
+
+To ensure that a compromised typeshed repository can't lead to copromised
+stub packages, all typeshed data is verified by the stub uploader before
+building packages. The stub uploader ensures that only stub and metadata
+files are added to the stub packages. This also means that no code from the
+typeshed repository must be executed while building packages, and no
+modules must be imported.
+
+## Dependencies
+
+Another possible attack vector are dependencies of stub packages.
+A compromised dependency can have a similar effect to when a stub package
+gets compromised directly. Therefore, only certain dependencies are
+allowed:
+
+* Dependencies on other stub packages created by typeshed.
+* Dependencies on packages the upstream package depends on – even recursively.
+  Since it's likely that a stub package gets installed alongside the
+  upstream package, this does not introduce an additional security liability.
+* Dependencies that are explicitly allowlisted in the stub uploader. These
+  dependencies are vetted to be from a trusted source.