14 lines (9 loc) · 445 Bytes

Security Policy

Reporting a vulnerability

Please do not open public issues or pull requests for security vulnerabilities.

Preferred: report privately using GitHub Security Advisories for this repository.

What to include

A clear description of the vulnerability and impact
Steps to reproduce (or a proof of concept)
Affected versions (package version and relevant usage)
Any suggested mitigation or fix (if you have one)