Skip to content

Commit

Permalink
Merge fd0d019 into a652541
Browse files Browse the repository at this point in the history
  • Loading branch information
phillipsb22 committed Oct 11, 2019
2 parents a652541 + fd0d019 commit 1f243e7
Showing 1 changed file with 8 additions and 5 deletions.
13 changes: 8 additions & 5 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,17 +3,20 @@
## Supported Versions

This package has no LTS releases - this means that we will only support the latest minor release with feature updates.
Because we never had any security vulnerabilities until now we don't promise any list of versions.
Instead we will decide this from case to case - depending on factors like:
We have never had any security vulnerabilities and therefore we don't promise any list of versions.
Instead we will determine this on a case by case basis - depending on factors like:
* vulnerable versions
* age of the versions
* usage of the versions (packagist downloads)
* effort needed to fix it in the versions

At all we will do our best to fix security issues and inform all users about possible issues.
We will do our best to fix security issues as and when they become apparent. We will attempt inform all users about
possible issues.

## Reporting a Vulnerability

Because security vulnerabilities could harm users we please you to don't use the public issue tracker to report them.
Due to the fact that security vulnerabilities could harm users, we ask that you don't use the public issue tracker
to report them.
Please write a mail to [dev.gummibeer@gmail.com](mailto:dev.gummibeer@gmail.com).
Depending on the kind of issue we will create a public issue/security alert or fix it and inform afterwards.
We will either create a public issue/security alert, or we will fix the vulnerability and inform users afterwards.

0 comments on commit 1f243e7

Please sign in to comment.