Skip to content

Security: yysskk/swift-mockable

SECURITY.md

Security Policy

Supported Versions

Security fixes are released for the latest published version of swift-mockable. Please upgrade to the most recent release before reporting an issue.

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

Instead, report them privately through GitHub's private vulnerability reporting. This lets us discuss and address the issue before it is publicly disclosed.

When reporting, please include:

  • A description of the vulnerability and its impact.
  • Steps to reproduce, or a proof of concept.
  • The affected version(s).

We will acknowledge your report as soon as we can and keep you informed of the progress toward a fix.

Scope

swift-mockable is a test-only code generation tool: the mocks it generates are wrapped in #if DEBUG by default and are not intended to ship in production builds. (The condition: argument can opt a mock out of that guard; doing so is an explicit, per-protocol decision by the adopting project.) Reports that are most relevant include issues in the macro implementation that could lead to unexpected code generation, or problems in the runtime Mockable module (for example MockableLock).

There aren't any published security advisories