From fe5c110b2e22b7854f01b68f87352ce071575ce0 Mon Sep 17 00:00:00 2001 From: Josh Bruce Date: Tue, 27 Feb 2018 13:16:03 -0500 Subject: [PATCH 1/2] Update security section --- README.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 73453c640f..09960f81d9 100644 --- a/README.md +++ b/README.md @@ -77,7 +77,9 @@ By supporting the above Markdown flavors, it's possible that Marked can help you

Security

-The only completely secure system is the one that doesn't exist in the first place. Having said that, we take the security of Marked very seriously; however, none of us are necessarily security experts, so to speak. Therefore, if you find something, [say something](https://github.com/markedjs/marked/issues), or, better yet, fix the thing! :) +The only completely secure system is the one that doesn't exist in the first place. Having said that, we take the security of Marked very seriously. + +Therefore, please disclose potential security issues by email to the project [committers](https://github.com/markedjs/marked/blob/master/AUTHORS.md). We will provide an initial assessment of security reports within 48 hours and should apply patches within 2 weeks (also, feel free to contribute a fix for the issue).

Contributing

From 7d1afaf7c4ff6b260b3fd437a9f9214c4bad715e Mon Sep 17 00:00:00 2001 From: Josh Bruce Date: Tue, 27 Feb 2018 13:27:29 -0500 Subject: [PATCH 2/2] Add listed owners as well --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 09960f81d9..b6916eda5c 100644 --- a/README.md +++ b/README.md @@ -79,7 +79,7 @@ By supporting the above Markdown flavors, it's possible that Marked can help you The only completely secure system is the one that doesn't exist in the first place. Having said that, we take the security of Marked very seriously. -Therefore, please disclose potential security issues by email to the project [committers](https://github.com/markedjs/marked/blob/master/AUTHORS.md). We will provide an initial assessment of security reports within 48 hours and should apply patches within 2 weeks (also, feel free to contribute a fix for the issue). +Therefore, please disclose potential security issues by email to the project [committers](https://github.com/markedjs/marked/blob/master/AUTHORS.md) as well as the [listed owners within NPM](https://docs.npmjs.com/cli/owner). We will provide an initial assessment of security reports within 48 hours and should apply patches within 2 weeks (also, feel free to contribute a fix for the issue).

Contributing