Skip to content

Security: FernandoTheDev/farpy

Security

SECURITY.md

Security Policy

At Farpy, we take security seriously. If you discover a vulnerability, we ask that you report it responsibly. Please follow the process outlined below to ensure that vulnerabilities are addressed in a timely and secure manner.

Supported Versions

We will provide security updates for the following versions of Farpy:

Version Supported
0.x.x

Reporting a Vulnerability

If you believe you have discovered a security vulnerability in Farpy, please follow these steps:

  1. Email: Send a report to our security team at:

  2. Details to Include: When reporting a vulnerability, please provide:

    • A clear and detailed description of the vulnerability.
    • Steps to reproduce the issue.
    • Any relevant code or data that can help us understand the problem.
  3. Timeline for Response: After you report the vulnerability, we will acknowledge receipt within 48 hours. We will provide an initial response with our findings and an estimated timeline for a fix.

  4. What Happens After: Once we have verified the vulnerability, we will work on a fix and release an update. If needed, we will issue a security advisory to inform users about the vulnerability and the necessary steps to mitigate it.

  5. Disclosure: We follow responsible disclosure practices. The vulnerability will not be disclosed publicly until a fix has been applied, ensuring that users are not at risk.

Security Best Practices

We encourage developers to follow best practices to ensure security in the Farpy project. This includes:

  • Regularly updating dependencies and libraries.
  • Performing static code analysis and vulnerability testing.
  • Writing secure code to prevent common vulnerabilities.

There aren’t any published security advisories