Skip to content

Latest commit

 

History

History
50 lines (33 loc) · 2.02 KB

SECURITY.md

File metadata and controls

50 lines (33 loc) · 2.02 KB
Raw

Security Policy

Supported Version

The following versions are supported with security updates:

Version Supported
1.x.x ✅
0.x.x ✅

Reporting a Vulnerability

If you discover a security vulnerability, please report it to us. We take all security vulnerabilities seriously and will address them promptly.

How to Report

  1. GitHub Security Advisories: Report the vulnerability via our GitHub Security Advisories page.
  2. Details: Include as much information as possible about the vulnerability. This should include:
    • Steps to reproduce the vulnerability
    • Potential impact of the vulnerability
    • Any possible fixes or workarounds

Response Process

  • We will acknowledge your report within 48 hours.
  • We will investigate the issue and provide an initial response within 5 business days.
  • We aim to provide a fix for the vulnerability promptly, typically within 30 days.

Public Disclosure

We will publish a summary of the vulnerability and its resolution once the fix has been deployed. If you prefer, we will credit you with the discovery of the vulnerability.

Our Security Measures

To ensure the security of our wiresense.js library, we use the following tools and practices:

  • Depfu: Automated dependency updates.
  • Dependabot: Alerts us to potential security vulnerabilities in our dependencies.
  • GitHub Code Scanning: Identifies potential security vulnerabilities in our codebase.
  • GitHub Secret Scanning: Detects and alerts on the presence of secrets within our repository.

Resources

For further queries or concerns, please contact us via email

Thank you for helping us keep our application secure!