docs: add a security policy, see #254

2026-09-16 12:50:38 -07:00 · 2020-11-29 20:59:00 +08:00
parent 75698eefec
commit 9706e8b411
1 changed files with 13 additions and 0 deletions
@@ -0,0 +1,13 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest major version is supported with security updates. It can be changed if many people are relying on a specific version for some reason. If this is the case, welcome to file an issue.
+
+## Reporting a Vulnerability
+
+Please contact yangjvn@126.com to report a vulnerability.
+
+- It will be fixed very soon (maybe within 1 week or couple of days) if that vulnerability obviously affects common use cases.
+- Otherwise, it'll be scheduled with a priority just like requested features (which is lower than bugs).
+- If it's declined, you'll receive an email (more oftenly there will be a discuss).