Skip to content

Commit 7abb297

Browse files
authored
Create SECURITY.md
1 parent 83a7f6d commit 7abb297

File tree

1 file changed

+53
-0
lines changed

1 file changed

+53
-0
lines changed

SECURITY.md

Lines changed: 53 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,53 @@
1+
# Security Policy
2+
3+
## Supported Versions
4+
5+
The table below indicates which versions of this project are currently supported with security updates:
6+
7+
| Version | Supported |
8+
| ------- | ------------------ |
9+
| 1.0.x | :white_check_mark: |
10+
| < 1.0 | :x: |
11+
12+
We recommend all users to upgrade to the latest stable version to benefit from ongoing security patches and improvements.
13+
14+
## Reporting a Vulnerability
15+
16+
📬 How to Report
17+
Please do not create a public GitHub issue for security-related matters. Instead, send an email to:
18+
19+
20+
(replace with your actual security contact email)
21+
22+
Alternatively, you may use GitHub's private security advisory system if your project is hosted on GitHub.
23+
24+
🔒 What to Include
25+
When reporting a vulnerability, please provide the following information (if possible):
26+
27+
- A clear description of the vulnerability
28+
29+
- Steps to reproduce or proof of concept (PoC)
30+
31+
- The potential impact or affected areas
32+
33+
- Any suggested fixes (optional)
34+
35+
⏱ Response Timeline
36+
You can expect a response within 72 hours of submitting your report. Once the issue is verified:
37+
38+
- We will notify you of the status and our planned resolution timeline.
39+
40+
- A fix will be prepared and applied to supported versions.
41+
42+
- We may coordinate with you to disclose the vulnerability once a fix is available (optional and with consent).
43+
44+
✅ After Resolution
45+
Once a fix is released, we will:
46+
47+
- Publish a changelog or security advisory
48+
49+
- Credit reporters if desired (with permission)
50+
51+
- Encourage all users to update their dependencies
52+
53+
We appreciate your efforts to help improve the security of this project!

0 commit comments

Comments
 (0)