Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 23 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
# Security Policy

## Reporting a Vulnerability

Please report security vulnerabilities through GitHub's private vulnerability reporting:

**[Report a vulnerability](https://github.com/script-development/fs-packages/security/advisories/new)**

Do not open a public issue for security vulnerabilities.

## What to Report

- Vulnerabilities in package source code
- Dependency vulnerabilities that affect consumers
- Build or publish pipeline security issues

## Response

We aim to acknowledge reports within 48 hours and provide a fix or mitigation plan within 7 days.

## Supported Versions

Only the latest published version of each package is supported. We do not backport fixes to older major versions.