I am trying to find out, which major/minor versions of metro-saaj are tested against security reports and are still receiving security updates. Since version 3.x has a baseline of Java 11, I am particularly interested whether version 2.x is still supported as a security-only branch.
The SECURITY.md file in this repository (which is used also in other repositories) says:
Supported versions are:
Check individual repositories for latest versions.
I have the impression that something is missing. Could you clarify this statement? Does it mean that only the latest minor version of the latest major version is supported?
I am trying to find out, which major/minor versions of
metro-saajare tested against security reports and are still receiving security updates. Since version 3.x has a baseline of Java 11, I am particularly interested whether version 2.x is still supported as a security-only branch.The
SECURITY.mdfile in this repository (which is used also in other repositories) says:I have the impression that something is missing. Could you clarify this statement? Does it mean that only the latest minor version of the latest major version is supported?