mirror of
https://github.com/harttle/liquidjs.git
synced 2026-09-15 12:20:40 -07:00
4775227358
Replace the private email contact with GitHub Security Advisories and set the common-case fix expectation to within a month. Co-authored-by: Cursor <[email protected]>
16 lines
825 B
Markdown
16 lines
825 B
Markdown
# Security Policy
|
|
|
|
## Supported Versions
|
|
|
|
Only the latest major version is supported with security updates. It can be changed if many people are relying on a specific version for some reason. If this is the case, welcome to file an issue.
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
**Please do not report security vulnerabilities through public GitHub issues.**
|
|
|
|
Report them via [GitHub Security Advisories — Report a vulnerability](https://github.com/harttle/liquidjs/security/advisories/new).
|
|
|
|
- If the vulnerability in question affects common use cases, it will be treated as a bug and fixed very soon (typically within a month).
|
|
- Otherwise, it'll be scheduled in the same priority of feature request (which is lower than bugs).
|
|
- If the request is declined, you'll receive a reply anyway (most likely there will be a discussion).
|