Skip to content
This repository has been archived by the owner on Jun 20, 2023. It is now read-only.

SECURITY.md #799

Closed
wants to merge 1 commit into from
Closed

SECURITY.md #799

wants to merge 1 commit into from

Conversation

auttakorngit
Copy link

@auttakorngit auttakorngit commented Oct 25, 2019

Pull request details

  • This PR is a bug fix
  • This PR implements a new feature or introduces new behavior.

Description of the change

Notes

Copy link
Author

@auttakorngit auttakorngit left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SECURITY

@the-j0k3r
Copy link
Collaborator

@auttakorngit Thanks for this PR.

I dont understand the versions you have added, none match our release versions.
further if you read #543 this is a community driven project and were there any security issues, who would fix them?

This project needs developers. And the project owner wants to archive the project so the project needs a new home and developers. Did I mention we need developers?

Thanks for understanding.

| 5.1.x | :white_check_mark: |
| 5.0.x | :x: |
| 4.0.x | :white_check_mark: |
| < 4.0 | :x: |
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This seems to be the default security file GitHub creates, I dont think this is even suitable for our project


Use this section to tell people how to report a vulnerability.

Tell them where to go, how often they can expect to get an update on a
Copy link
Collaborator

@the-j0k3r the-j0k3r Oct 26, 2019

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes this is a problem, theres no active devs that have shown interest or said that are qualified to handle these reports, never mind fix them.

Meanwhile the vacancy is open for a volunteer, if you or someone you know can audit our code and fix it I would be happy to talk about it further.

@the-j0k3r the-j0k3r closed this Oct 26, 2019
@the-j0k3r
Copy link
Collaborator

Ill reopen this to give other people the opportunity to chime in. Shouldn't have closed it.

@the-j0k3r
Copy link
Collaborator

@auttakorngit did you wish to improve this PR or no?

@the-j0k3r the-j0k3r closed this Aug 30, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants