Update Contributing, Notice and security file

Signed-off-by: Lukas Jungmann <[email protected]>

CONTRIBUTING.md

@@ -1,4 +1,4 @@
-[//]: # " Copyright (c) 2018, 2020 Oracle and/or its affiliates. All rights reserved. "
+[//]: # " Copyright (c) 2018, 2023 Oracle and/or its affiliates. All rights reserved. "
 [//]: # "  "
 [//]: # " This program and the accompanying materials are made available under the "
 [//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at "
@@ -12,11 +12,18 @@ Thanks for your interest in this project.
 
 ## Project description
 
-Jakarta SOAP with Attachments defines an API enabling developers to produce
-and consume messages conforming to the SOAP 1.1, SOAP 1.2, and SOAP Attachments Feature.
+The Jakarta XML Web Services™ is a Java programming language API for creating
+web services, particularly SOAP services. Jakarta XML Web Services is one of the
+Java XML programming APIs. It is part of the Jakarta EE platform.
 
 * https://projects.eclipse.org/projects/ee4j.jaxws
 
+## Terms of Use
+
+This repository is subject to the Terms of Use of the Eclipse Foundation
+
+* https://www.eclipse.org/legal/termsofuse.php
+
 ## Developer resources
 
 Information regarding source code management, builds, coding standards, and
@@ -26,25 +33,9 @@ more.
 
 The project maintains the following source code repositories
 
-* https://github.com/eclipse-ee4j/saaj-api
-* https://github.com/eclipse-ee4j/jax-ws-api
-* https://github.com/eclipse-ee4j/jws-api
-
-## Eclipse Contributor Agreement
-
-Before your contribution can be accepted by the project team contributors must
-electronically sign the Eclipse Contributor Agreement (ECA).
-
-* http://www.eclipse.org/legal/ECA.php
-
-Commits that are provided by non-committers must have a Signed-off-by field in
-the footer indicating that the author is aware of the terms by which the
-contribution has been provided to the project. The non-committer must
-additionally have an Eclipse Foundation account and must have a signed Eclipse
-Contributor Agreement (ECA) on file.
-
-For more information, please see the Eclipse Committer Handbook:
-https://www.eclipse.org/projects/handbook/#resources-commit
+* https://github.com/jakartaee/jws-api
+* https://github.com/jakartaee/jax-ws-api
+* https://github.com/jakartaee/saaj-api
 
 ## Eclipse Development Process
 
@@ -61,8 +52,25 @@ Jakarta EE specification projects.
 * https://jakarta.ee/about/jesp/
 * https://www.eclipse.org/legal/efsp_non_assert.php
 
+## Eclipse Contributor Agreement
+
+In order to be able to contribute to Eclipse Foundation projects you must
+electronically sign the Eclipse Contributor Agreement (ECA).
+
+* https://www.eclipse.org/legal/ECA.php
+
+The ECA provides the Eclipse Foundation with a permanent record that you agree
+that each of your contributions will comply with the commitments documented in
+the Developer Certificate of Origin (DCO). Having an ECA on file associated with
+the email address matching the "Author" field of your contribution's Git commits
+fulfills the DCO's requirement that you sign-off on your contributions.
+
+For more information, please see the Eclipse Committer Handbook:
+https://www.eclipse.org/projects/handbook/#resources-commit
+
 ## Contact
 
 Contact the project developers via the project's "dev" list.
 
 * https://accounts.eclipse.org/mailing-list/jaxws-dev
+* 

NOTICE.md

@@ -1,4 +1,4 @@
-[//]: # " Copyright (c) 2018, 2019 Oracle and/or its affiliates. All rights reserved. "
+[//]: # " Copyright (c) 2018, 2023 Oracle and/or its affiliates. All rights reserved. "
 [//]: # "  "
 [//]: # " This program and the accompanying materials are made available under the "
 [//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at "
@@ -8,8 +8,7 @@
 
 # Notices for Jakarta SOAP with Attachments
 
-This content is produced and maintained by the Jakarta XML Web Services
-project.
+This content is produced and maintained by the Jakarta XML Web Services project.
 
 * Project home: https://projects.eclipse.org/projects/ee4j.jaxws
 
@@ -26,18 +25,18 @@ source code repository logs.
 ## Declared Project Licenses
 
 This program and the accompanying materials are made available under the terms
-of the Eclipse Distribution License v. 1.0 which is available
-at http://www.eclipse.org/org/documents/edl-v10.php.
+of the Eclipse Distribution License v1.0 which is available at
+https://www.eclipse.org/org/documents/edl-v10.php.
 
 SPDX-License-Identifier: BSD-3-Clause
 
 ## Source Code
 
 The project maintains the following source code repositories:
 
-* https://github.com/eclipse-ee4j/jws-api
-* https://github.com/eclipse-ee4j/jax-ws-api
-* https://github.com/eclipse-ee4j/saaj-api
+* https://github.com/jakartaee/jws-api
+* https://github.com/jakartaee/jax-ws-api
+* https://github.com/jakartaee/saaj-api
 
 ## Third-party Content
 
@@ -52,4 +51,4 @@ may have restrictions on the import, possession, and use, and/or re-export to
 another country, of encryption software. BEFORE using any encryption software,
 please check the country's laws, regulations and policies concerning the import,
 possession, or use, and re-export of encryption software, to see if this is
-permitted.
+permitted.

SECURITY.md

@@ -0,0 +1,29 @@
+[//]: # " Copyright (c) 2023 Oracle and/or its affiliates. All rights reserved. "
+[//]: # "  "
+[//]: # " This program and the accompanying materials are made available under the "
+[//]: # " terms of the Eclipse Distribution License v. 1.0, which is available at "
+[//]: # " http://www.eclipse.org/org/documents/edl-v10.php. "
+[//]: # "  "
+[//]: # " SPDX-License-Identifier: BSD-3-Clause "
+
+# Security Policy
+
+This project implements the Eclipse Foundation Security Policy
+
+* https://www.eclipse.org/security
+
+## Supported Versions
+
+These versions of Jakarta XML Web Services are currently being supported with
+security updates.
+
+| Version                             | Released   | Supported          | 
+| ----------------------------------- | ---------- | ------------------ | 
+| 4.0 (Jakarta XML Web Services)      | 2022-03-31 | :white_check_mark: | 
+| 3.0 (Jakarta SOAP with Attachments) | 2022-03-30 | :white_check_mark: | 
+| < 3.0.1 (Jakarta XML Web Services)  | 2021-03-26 | :x:                | 
+
+## Reporting a Vulnerability
+
+Please report vulnerabilities to the Eclipse Foundation Security Team at
+[email protected]