[tomasr78]

README bug audit, like the one done for the .NET SDK, plus a license file and a security policy.

• The "Additional conversion parameters" snippet passed PdfResolution, which DOCX to PDF does not have (https://v2.convertapi.com/info/openapi/docx/to/pdf). It now passes Pdfa next to PageRange.
• Configuration: "your-api-secret-or-token" and "your-api-secret" mentioned API secrets; ConvertAPI authenticates with API tokens, and the other SDK READMEs already say token, so both now say token. The link goes to the API token page (https://www.convertapi.com/a/authentication).
• Links: the formats page /conversions and /doc/supported-formats now point to https://www.convertapi.com/api, and /doc/user and /doc/servers-location to https://www.convertapi.com/docs/user-information and https://www.convertapi.com/docs/servers-location (where the old URLs redirect).
• Contributor Covenant link is https.
• LICENSE: the standard MIT text, Copyright (c) 2012-2026 ConvertAPI, the same as https://github.com/ConvertAPI/convertapi-library-dotnet/blob/main/LICENSE. The license stays MIT; the old file wrapped the MIT text in extra header lines, so GitHub could not detect it.
• SECURITY.md: how to report a vulnerability privately, adapted from https://github.com/ConvertAPI/convertapi-library-dotnet/blob/main/SECURITY.md. Its report link needs private vulnerability reporting turned on in this repo's settings; that is a separate settings change.

Tested against production in php:8.4-cli: the corrected parameters snippet and examples/create_pdf_thumbnail.php (a 231x300 JPG), with the test files deleted afterwards.

No SDK code changes.

🤖 Generated with Claude Code

[Copilot]

🟢 Approval recommended

There are no active review issues for the documentation, license, and security-policy changes.

No open issues 🎉

What changed in this PR

Updates the PHP SDK’s documentation, standardizes the existing MIT license for GitHub detection, and adds a private vulnerability-reporting policy. No SDK code changes are included.

Changes:

• Corrects the README’s DOCX-to-PDF parameters, API-token wording, and documentation links.
• Reformats the MIT license and updates the copyright notice.
• Adds security-reporting instructions and a supported-version policy; the report form requires private vulnerability reporting to be enabled separately.

File	Description
SECURITY.md	Adds private reporting guidance and states that security fixes target the latest package version.
README.md	Corrects conversion examples, authentication wording, and links.
LICENSE	Uses standard MIT formatting with the updated ConvertAPI copyright notice.

_{Review effort: Balanced}