Add security policy

brandonbothell · May 19, 2021 · 952da8f · 952da8f
1 parent b6463df
commit 952da8f
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,10 @@
+# Security Policy
+
+## Supported Versions
+
+Only the latest major version will be supported. For example, if the issue lies in v4.1.2 and v5.2.3, and we are in v5.x.x, I would only make a security patch for v5.2.3.
+
+## Reporting a Vulnerability
+
+Report a vulnerability via email to `shadowmanguyyt [at] gmail [dot] com`. You can expect an update within 1-3 days of the report.
+Depending on the severity of the vulnerability, there may not be an update at all. You will at least get a reply explaining the decision either way.