turf/docs/SECURITY.md
James Beard a8cbea3a48
Revamped content and layout of project docs (README, CONTRIBUTING, etc) (#2770)
* Moved "optional" project documentation files to docs/ subdir to minimise clutter in project root.

* Verbatim copy of Contributor Covenant v2.1. Updated code of conduct contact details, removing anyone who don't list obvious contact details (@lyzidiamond and @tcql).

* Split publishing topic out into a separate document. Only a small subset of contributors will ever publish so better to have CONTRIBUTING focus on coding and PR related activities.

* Updated issue and PR templates to read a bit better, ask for more meaningful details.

* Updating open collective stats, project goals for coming year.

* Split readme into a few pieces. Cut a lot of cut and paste commands (hard to guarantee currency). Removed REGEN references - think it's use should be discouraged, though probably differing opinions on that one!

Co-authored-by: mfedderly <24275386+mfedderly@users.noreply.github.com>
Co-authored-by: Tim Welch <tim.j.welch@gmail.com>

---------

Co-authored-by: mfedderly <24275386+mfedderly@users.noreply.github.com>
Co-authored-by: Tim Welch <tim.j.welch@gmail.com>
2024-12-28 14:34:02 +11:00

14 lines
684 B
Markdown

# Security Policy
## Supported Versions
Security updates are applied only to the latest release.
## Reporting a Vulnerability
If you have discovered a security vulnerability in this project, please report it privately. **Do not disclose it as a public issue.** This gives us time to work with you to fix the issue before public exposure, reducing the chance that the exploit will be used before a patch is released.
Please disclose it at [security advisory](https://github.com/Turfjs/turf/security/advisories/new).
This project is maintained by a team of volunteers on a reasonable-effort basis. As such, please give us at least 90 days to work on a fix before public exposure.