Skip to content
This repository has been archived by the owner on Jun 20, 2023. It is now read-only.

SECURITY.md #799

Closed
wants to merge 1 commit into from
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
# Security Policy

## Supported Versions

Use this section to tell people about which versions of your project are
currently being supported with security updates.

| Version | Supported |
| ------- | ------------------ |
| 5.1.x | :white_check_mark: |
| 5.0.x | :x: |
| 4.0.x | :white_check_mark: |
| < 4.0 | :x: |
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This seems to be the default security file GitHub creates, I dont think this is even suitable for our project


## Reporting a Vulnerability

Use this section to tell people how to report a vulnerability.

Tell them where to go, how often they can expect to get an update on a
Copy link
Collaborator

@the-j0k3r the-j0k3r Oct 26, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes this is a problem, theres no active devs that have shown interest or said that are qualified to handle these reports, never mind fix them.

Meanwhile the vacancy is open for a volunteer, if you or someone you know can audit our code and fix it I would be happy to talk about it further.

reported vulnerability, what to expect if the vulnerability is accepted or
declined, etc.