Skip to content

Security: ryonakano/reco

SECURITY.md

Security Policy

Supported Versions

Always only latest version is being supported with security updates.

The main reason of this is that only one version can be published at the same time in the remote app stores like Flathub or AppCenter. Another reason is to lessen burden of the project maintainer.

Reporting a Vulnerability

Please follow this guideline if you find any vulnerabilities in this project.

  • Report via Security Advisories. Do NOT report via other ways like issues or email so that your vulnerability report is not missed.
  • Describe the vulnerability as much as possible in addition to the placeholder provided by GitHub. For example, steps to reproduce, screenshots, or screencasts are appreciated.
  • Create a private PR if you have a fix. Refer to GitHub Docs for details of how to do it.
  • We'll evaluate the vulnerability and perform the first response at wrose 2 weeks.
  • Do NOT disclose the vulnerability publicly until we release a fix, publish mitigating steps, or decline to address it.

There aren't any published security advisories