From 8c3070bf5ac6a1f55bf5d79306f846678a2f4439 Mon Sep 17 00:00:00 2001 From: Floriel Date: Wed, 12 Apr 2023 23:28:50 +0200 Subject: [PATCH] Create SECURITY.md (#1103) --- SECURITY.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..3c2e4c60 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,17 @@ +# Security Policy + +## Supported Versions + +This is the list of versions of PurgeCSS which are currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.0.x | :white_check_mark: | +| < 5.0 | :x: | + +## Reporting a Vulnerability + +To report a vulnerability, please report it directly on GitHub. If you are not able to report it on GitHub, +you can send an email with the details to contact@full-human.com. The vulnerability report must include a +proof-of-concept of the exploit, or at least a few pointers that can help us assess the risk level. +Your report will be acknowledged within 2 business days.