Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
# Security Policy

## Supported Versions

Use this section to tell people about which versions of your project are
currently being supported with security updates.
Comment on lines +5 to +6
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

This introductory text appears to be placeholder content from a template. Since the table below already provides the necessary information about supported versions, this text is redundant and can be removed for better clarity.


| Version | Supported |
| ------- | ------------------ |
| 5.1.x | :white_check_mark: |
| 5.0.x | :x: |
| 4.0.x | :white_check_mark: |
| < 4.0 | :x: |

## Reporting a Vulnerability

Use this section to tell people how to report a vulnerability.

Tell them where to go, how often they can expect to get an update on a
reported vulnerability, what to expect if the vulnerability is accepted or
declined, etc.
Comment on lines +17 to +21
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The 'Reporting a Vulnerability' section currently contains placeholder text. To make this security policy effective, it's crucial to provide specific instructions on how to report a vulnerability. Please replace this placeholder with details such as the reporting method (e.g., email, GitHub's private vulnerability reporting), expected response times, and the process for handling submissions.

Suggested change
Use this section to tell people how to report a vulnerability.
Tell them where to go, how often they can expect to get an update on a
reported vulnerability, what to expect if the vulnerability is accepted or
declined, etc.
We take security vulnerabilities seriously. If you discover a security vulnerability, please report it to us privately.
Please use GitHub's private vulnerability reporting feature to submit your report.
You can expect an initial response within 48 hours. We will work with you to resolve the issue and will publicly acknowledge your contribution if you wish.