Skip to content

Security: madeinoz67/maker-hub

Security

SECURITY.md

Security Policy

Supported Versions

We will endeavour to support:

  • the most recent minor release with bug fixes
  • the latest minor release from the last major version for 6 months after a new major version is released with critical bug fixes
  • all versions if a security vulnerability is found provided 1) upgrading to a later version is non-trivial 2) sufficient people are using that version to make support worthwhile

Reporting a Vulnerability

If you find what you think might be a security vulnerability with make-hub, please DO NOT create an issue on github.

Instead, please use PGP to encrypt your email using my public key below and send the encrypted email to [email protected].

I'll reply to your email promptly and try to get a patch out ASAP.

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=oaPh
-----END PGP PUBLIC KEY BLOCK-----

There aren’t any published security advisories