The purpose of this Security Policy is to ensure the security of our project and maintain the trust of the community.
This policy applies to all members of our project community, including developers, testers, repository administrators, and users.
Use this section to tell people about which versions of your project are currently being supported with security updates.
Version | Supported |
---|---|
2.0.x | ✅ |
< 1.2.0 | ❌ |
- Follow secure coding principles.
- Use well-established libraries and frameworks.
- Regularly update dependencies.
- Conduct thorough testing, including security-related tests.
- Do not use known vulnerabilities that have not been patched.
- Do not publish sensitive information such as API keys or passwords.
- Do not vote for changes that degrade the security of the project.
- Ensure that user-generated content does not contain hidden threats.
- Be cautious when handling user data.
- Treat each other with respect and politeness.
- Do not spread spam or spam bots.
- Follow community guidelines.
- If you discover a vulnerability, report it as an issue on GitHub.
- Your report should contain detailed information about the vulnerability, including steps to resolve it.
To report a vulnerability, create a new issue on GitHub and use branch isolation to provide details about the vulnerability.
Please provide the following information about the vulnerability:
- Description of the vulnerability
- Steps to resolve the vulnerability
- Versions on which the vulnerability was found
- Code examples illustrating the vulnerability (if it is safe to do so)
- If we accept the reported vulnerability, we will release a patch and update the security information on GitHub.
- If we reject the reported vulnerability, we will provide an explanation.